]> git.ipfire.org Git - thirdparty/suricata.git/commit
tls: deprecate "default" as a encryption-handling option
authorLukas Sismis <lsismis@oisf.net>
Thu, 27 Mar 2025 16:10:12 +0000 (17:10 +0100)
committerVictor Julien <victor@inliniac.net>
Mon, 7 Apr 2025 04:57:48 +0000 (06:57 +0200)
commit185123a1304434d13a8eca4bd027e97641f1c4f6
tree7ddb541093630a0c638217b93854596f10ee2e66
parent92d5a3fd0a17554194971101bb658e928643b141
tls: deprecate "default" as a encryption-handling option

The default value for TLS encryption is generic and not precise.
The new keyword, "track-only" substitues the old keyword, being
more on point what action is actually taken when the TLS flow
reaches an encrypted state.
doc/userguide/configuration/suricata-yaml.rst
doc/userguide/upgrade.rst
src/app-layer-ssl.c
suricata.yaml.in