diff --git a/doc/api/tls.md b/doc/api/tls.md index dcfe42ae16c7a6..ec2cb286fe31c6 100644 --- a/doc/api/tls.md +++ b/doc/api/tls.md @@ -173,8 +173,8 @@ low-entropy sources is not secure. PSK ciphers are disabled by default, and using TLS-PSK thus requires explicitly specifying a cipher suite with the `ciphers` option. The list of available ciphers can be retrieved via `openssl ciphers -v 'PSK'`. All TLS 1.3 -ciphers are eligible for PSK but currently only those that use SHA256 digest are -supported they can be retrieved via `openssl ciphers -v -s -tls1_3 -psk`. +ciphers are eligible for PSK and can be retrieved via +`openssl ciphers -v -s -tls1_3 -psk`. According to the [RFC 4279][], PSK identities up to 128 bytes in length and PSKs up to 64 bytes in length must be supported. As of OpenSSL 1.1.0