anchor.diff:  [%collapsible]
   ====
   *Details* +
  -If `xpack.security.fips_mode.enabled` is true (see <<fips-140-compliance>>), 
  +If `xpack.security.fips_mode.enabled` is true (see <<fips-140-compliance>>),
   the value of `xpack.security.authc.password_hashing.algorithm` now defaults to
   `pbkdf2_stretch`.
   
  
positive.code: ====
  
  [discrete]
  [[ssl-validation-changes]]
  ===== SSL/TLS configuration validation
  
  
negative.code: 
  [discrete]
  [[ssl-misc-changes]]
  ===== Other SSL/TLS changes
  
  .PKCS#11 keystores and trustores cannot be configured in `elasticsearch.yml`
  [%collapsible]
  