enhancement(deps)!: remove openssl legacy provider flag and update docs

Cargo.toml

@@ -385,8 +385,6 @@ nix = { git = "https://github.com/vectordotdev/nix.git", branch = "memfd/gnu/mus
 # The `heim` crates depend on `ntapi` 0.3.7 on Windows, but that version has an
 # unaligned access bug fixed in the following revision.
 ntapi = { git = "https://github.com/MSxDOS/ntapi.git", rev = "24fc1e47677fc9f6e38e5f154e6011dc9b270da6" }
-# 300.1.3+3.1.2 + a commit that re-adds force-engine flag. Can be removed after next release of openssl-src.
-openssl-src = { git = "https://github.com/alexcrichton/openssl-src-rs", ref = "26dc3c81d8ebee5f7ec40835e29bf9f37e648ab2" }
 
 [features]
 # Default features for *-unknown-linux-gnu and *-apple-darwin

src/cli.rs

@@ -202,8 +202,8 @@ pub struct RootOpts {
     #[arg(
         long,
         env = "VECTOR_OPENSSL_LEGACY_PROVIDER",
-        default_value = "true",
-        default_missing_value = "true",
+        default_value = "false",
+        default_missing_value = "false",
         num_args = 0..=1,
         require_equals = true,
         action = ArgAction::Set

website/cue/reference/components/sinks.cue

@@ -644,7 +644,9 @@ components: sinks: [Name=string]: {
 					title: "Transport Layer Security (TLS)"
 					body:  """
 						Vector uses [OpenSSL](\(urls.openssl)) for TLS protocols due to OpenSSL's maturity. You can
-						enable and adjust TLS behavior using the [`tls.*`](#tls) options.
+						enable and adjust TLS behavior via the [`tls.*`](#tls) options and/or via the 
+						[OpenSSL configuration options](\(urls.openssl_conf)) exposed through environment variables, 
+						particularly `OPENSSL_CONF`.
 						"""
 				}
 			}

website/cue/reference/components/sources.cue

@@ -356,9 +356,11 @@ components: sources: [Name=string]: {
 		_tls: {
 			title: "Transport Layer Security (TLS)"
 			body:  """
-				  Vector uses [OpenSSL](\(urls.openssl)) for TLS protocols. You can
-				  adjust TLS behavior via the `tls.*` options.
-				  """
+				Vector uses [OpenSSL](\(urls.openssl)) for TLS protocols due to OpenSSL's maturity. You can
+				enable and adjust TLS behavior via the `tls.*` options and/or via the 
+				[OpenSSL configuration options](\(urls.openssl_conf)) exposed through environment variables, 
+				particularly `OPENSSL_CONF`.
+				"""
 		}
 
 		if features.collect != _|_ {

website/cue/reference/components/sources/opentelemetry.cue

@@ -198,9 +198,11 @@ components: sources: opentelemetry: {
 		tls: {
 			title: "Transport Layer Security (TLS)"
 			body:  """
-				  Vector uses [OpenSSL](\(urls.openssl)) for TLS protocols. You can
-				  adjust TLS behavior via the `grpc.tls.*` and `http.tls.*` options.
-				  """
+				Vector uses [OpenSSL](\(urls.openssl)) for TLS protocols due to OpenSSL's maturity. You can
+				enable and adjust TLS behavior via the `grpc.tls.*` and `http.tls.*` options and/or via the 
+				[OpenSSL configuration options](\(urls.openssl_conf)) exposed through environment variables, 
+				particularly `OPENSSL_CONF`.
+				"""
 		}
 	}
 }

website/cue/reference/urls.cue

@@ -383,6 +383,7 @@ urls: {
 	nixos:                                      "https://nixos.org/"
 	nixpkgs_9682:                               "\(github)/NixOS/nixpkgs/issues/9682"
 	openssl:                                    "https://www.openssl.org/"
+	openssl_conf:                               "https://www.openssl.org/docs/manmaster/man5/config.html"
 	opentelemetry:                              "https://opentelemetry.io"
 	opentelemetry_protocol:                     "\(opentelemetry)/docs/reference/specification/protocol/otlp/"
 	order_of_ops:                               "\(wikipedia)/wiki/Order_of_operations"