Skip to content

Commit 499658d

Browse files
3.13.0 release notes: mention Erlang 26 TLS default changes
1 parent fe77730 commit 499658d

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

release-notes/3.13.0.md

+10
Original file line numberDiff line numberDiff line change
@@ -171,6 +171,16 @@ connect to the same node, or inject a pause, or await a certain condition that i
171171
is in place.
172172

173173

174+
### TLS Defaults
175+
176+
Starting with Erlang 26, client side [TLS peer certificate chain verification](https://www.rabbitmq.com/docs/ssl#peer-verification) settings are enabled by default in most contexts:
177+
from federation links to shovels to TLS-enabled LDAP client connections.
178+
179+
If using TLS peer certificate chain verification is not practical or necessary, it can be disabled.
180+
Please refer to the docs of the feature in question, for example,
181+
this one [on TLS-enabled LDAP client](http://rabbitmq.com/docs/ldap/#tls) connections.
182+
183+
174184
### Management Plugin and HTTP API
175185

176186
GET /api/queues` HTTP API endpoint has dropped several rarely used metrics, resulting in up to 25% in traffic saving.

0 commit comments

Comments
 (0)