doc: update OpenSSL default security level to 2

JeetuSuthar · targos · commit 583b1b255d97 · 2025-09-09T08:40:51.000+02:00
The default OpenSSL security level changed from 1 to 2 in OpenSSL 3.2, which was included in Node.js 24.5. This change enforces stricter cryptographic requirements. Fixes: #59715 PR-URL: #59723 Reviewed-By: Richard Lau <richard.lau@ibm.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
diff --git a/doc/api/tls.md b/doc/api/tls.md
@@ -454,7 +454,7 @@ are not enabled by default since they offer less security.
 The OpenSSL library enforces security levels to control the minimum acceptable
 level of security for cryptographic operations. OpenSSL's security levels range
 from 0 to 5, with each level imposing stricter security requirements. The default
-security level is 1, which is generally suitable for most modern applications.
+security level is 2, which is generally suitable for most modern applications.
 However, some legacy features and protocols, such as TLSv1, require a lower
 security level (`SECLEVEL=0`) to function properly. For more detailed information,
 please refer to the [OpenSSL documentation on security levels][].
