You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@trafficserver.apache.org by am...@apache.org on 2019/05/14 14:02:43 UTC

[trafficserver] branch master updated: Document proxy.config.ssl.server.honor_cipher_order

This is an automated email from the ASF dual-hosted git repository.

amc pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/trafficserver.git


The following commit(s) were added to refs/heads/master by this push:
     new 9f0016e  Document proxy.config.ssl.server.honor_cipher_order
9f0016e is described below

commit 9f0016e07ff0d016b8edb53ac40d7a66e5ed9161
Author: Valentin Gutierrez <vg...@wikimedia.org>
AuthorDate: Mon May 13 10:59:25 2019 +0200

    Document proxy.config.ssl.server.honor_cipher_order
---
 doc/admin-guide/files/records.config.en.rst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/doc/admin-guide/files/records.config.en.rst b/doc/admin-guide/files/records.config.en.rst
index fcfd35a..4065b56 100644
--- a/doc/admin-guide/files/records.config.en.rst
+++ b/doc/admin-guide/files/records.config.en.rst
@@ -3087,6 +3087,11 @@ SSL Termination
 
    This configuration works with OpenSSL v1.1.1 and above.
 
+.. ts:cv:: CONFIG proxy.config.ssl.server.honor_cipher_order INT 1
+
+   By default (``1``) |TS| will use the server's cipher suites preferences instead of the client preferences.
+   By disabling it (``0``) |TS| will use client's cipher suites preferences.
+
 .. ts:cv:: CONFIG proxy.config.ssl.client.TLSv1_3.cipher_suites STRING <See notes under proxy.config.ssl.server.tls.cipher_suites>
 
    Configures the cipher_suites which |TS| will use for TLSv1.3