[!!!][TASK] Remove lockSSL=3 option
[Packages/TYPO3.CMS.git] / typo3 / sysext / core / Documentation / Changelog / master / Breaking-70229-BE-lockSSL3OptionRemoved.rst
1 ================================================
2 Breaking: #70229 - BE-lockSSL = 3 option removed
3 ================================================
4
5 Description
6 ===========
7
8 The global option ``$TYPO3_CONF_VARS[BE][lockSSL]`` allows to lock the backend usage to be worked completely over SSL.
9 Setting this option to "3" allowed to have only the backend login transmitted via SSL, but the rest forced to work
10 via plain HTTP. Option "3" has been removed in favor of having a full SSL session for all communication between the
11 server and the client / browser.
12
13
14 Impact
15 ======
16
17 Installations having ``lockSSL`` set to "3" will now behave just as it would be lockSSL=1.
18
19
20 Affected Installations
21 ======================
22
23 Any installation that has ``$TYPO3_CONF_VARS[BE][lockSSL]`` set to 3, only having SSL for the Backend login page.
24
25
26 Migration
27 =========
28
29 It is recommended to set the ``$TYPO3_CONF_VARS[BE][lockSSL]`` option to 1 or 2, depending on the environment and the
30 possibilities of having SSL available.