Document that we use TLSv1.

This commit is contained in:
Ben Pfaff committed 2008-03-19 09:35:11 -07:00
1 parent 238b46a726
commit 8d16e3510d
1 file changed
+7 -2
+7 -2
View File
@@ -185,8 +185,8 @@ Secure operation over SSL
-------------------------
The instructions above set up OpenFlow for operation over a plaintext
TCP connection. Production use of OpenFlow should use SSL to ensure
confidentiality and authenticity of traffic among switches and
TCP connection. Production use of OpenFlow should use SSL[*] to
ensure confidentiality and authenticity of traffic among switches and
controllers.
To use SSL with OpenFlow, you must set up a public-key infrastructure
@@ -219,6 +219,11 @@ instructions below, then the invocation would look like:
% secchan -v nl:0 ssl:192.168.1.2 --private-key=sc-privkey.pem \
--certificate=sc-cert.pem --ca-cert=pki/controllerca/cacert.pem
[*] To be specific, OpenFlow uses TLS version 1.0 or later (TLSv1), as
specified by RFC 2246, which is very similar to SSL version 3.0.
TLSv1 was released in January 1999, so all current software and
hardware should implement it.
Establishing a Public Key Infrastructure
----------------------------------------