Skip to content

Commit a146a1c

Browse files
authored
Remove unused openssl security settings for 3.0.0 (#9588)
Signed-off-by: Craig Perkins <[email protected]>
1 parent 0b67148 commit a146a1c

File tree

2 files changed

+0
-33
lines changed

2 files changed

+0
-33
lines changed

_install-and-configure/configuring-opensearch/security-settings.md

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -307,16 +307,6 @@ The Security plugin supports the following REST layer TLS key store and trust st
307307

308308
For more information, see [REST layer TLS]({{site.url}}{{site.baseurl}}/security/configuration/tls/#rest-layer-tls-1).
309309

310-
## OpenSSL settings
311-
312-
The Security plugin supports the following OpenSSL settings:
313-
314-
- `plugins.security.ssl.transport.enable_openssl_if_available` (Static): Enables OpenSSL on the transport layer if available. Optional. Default is `true`.
315-
316-
- `plugins.security.ssl.http.enable_openssl_if_available` (Static): Enables OpenSSL on the REST layer if available. Optional. Default is `true`.
317-
318-
For more information, see [OpenSSL]({{site.url}}{{site.baseurl}}/security/configuration/tls/#advanced-openssl).
319-
320310
## X.509 PEM certificates and PKCS #8 keys---transport layer TLS settings
321311

322312
The Security plugin supports the following transport layer TLS settings related to X.509 PEM certificates and PKCS #8 keys:

_security/configuration/tls.md

Lines changed: 0 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -140,29 +140,6 @@ For security reasons, you cannot use wildcards or regular expressions as values
140140
For more information about admin and super admin user roles, see [Admin and super admin roles]({{site.url}}{{site.baseurl}}/security/access-control/users-roles/#admin-and-super-admin-roles).
141141

142142

143-
## (Advanced) OpenSSL
144-
145-
The Security plugin supports OpenSSL, but we only recommend it if you use Java 8. If you use Java 11, we recommend the default configuration.
146-
147-
To use OpenSSL, you must install OpenSSL, the Apache Portable Runtime, and a Netty version with OpenSSL support matching your platform on all nodes.
148-
149-
If OpenSSL is enabled, but for one reason or another the installation does not work, the Security plugin falls back to the Java JCE as the security engine.
150-
151-
Name | Description
152-
:--- | :---
153-
`plugins.security.ssl.transport.enable_openssl_if_available` | Enable OpenSSL on the transport layer if available. Optional. Default is `true`.
154-
`plugins.security.ssl.http.enable_openssl_if_available` | Enable OpenSSL on the REST layer if available. Optional. Default is `true`.
155-
156-
{% comment %}
157-
1. Install [OpenSSL 1.1.0](https://www.openssl.org/community/binaries.html) on every node.
158-
1. Install [Apache Portable Runtime](https://apr.apache.org) on every node:
159-
160-
```
161-
sudo yum install apr
162-
```
163-
{% endcomment %}
164-
165-
166143
## (Advanced) Hostname verification and DNS lookup
167144

168145
In addition to verifying the TLS certificates against the root CA and/or intermediate CA(s), the Security plugin can apply additional checks on the transport layer.

0 commit comments

Comments
 (0)