View Issue Details

IDProjectCategoryView StatusLast Update
0006135SUMoRefactoringpublic2020-08-13 22:50
ReporterGuruGabe Assigned ToKyle_Katarn  
PrioritynormalSeverityminorReproducibilityhave not tried
Status acknowledgedResolutionopen 
Product Version5.11.2 
Target VersionShort term 
Summary0006135: TLS 1.2
DescriptionThe program needs to start using TLS 1.2 for communication back to your servers. The standard now is for SSL and TLS 1.1 and below to be disabled for HTTPS communication because those protocols are no longer considered to be secure. Most web browsers have already blocked the lower standards and Microsoft is planning on completely disabling it in Windows soon. I have already turned it off for my system and that has stopped Sumo from communicating back to you servers.
Steps To ReproduceDisable SSL, TLS 1.1 and TLS 1.0 and receive error Server Error. Please retry later.
TagsNo tags attached.

Activities

GuruGabe

2020-08-12 16:12

reporter   ~0004000

Checked log and it shows DBCheck : Server error (10060 Cause : Winsock - Connection timed out (Error #10060) to 185.7.248.1:80)
Port 80 is HTTP

Kyle_Katarn

2020-08-12 20:49

administrator   ~0004001

What are you doing in order to "Disable SSL, TLS 1.1 and TLS 1.0" ?

GuruGabe

2020-08-12 22:35

reporter   ~0004002

In the registry, using Microsoft recommendations of disabling SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.1.
https://docs.microsoft.com/en-us/windows-server/security/tls/tls-registry-settings#ssl-20

Kyle_Katarn

2020-08-12 23:12

administrator   ~0004003

So in your test case you've disabled all 4 protocols, correct ?
Have you checked if disabling only one of the 4 leads to the same consequence ?

GuruGabe

2020-08-12 23:56

reporter   ~0004004

TLS 1.2 and 1.3 are still active

Kyle_Katarn

2020-08-13 07:14

administrator   ~0004005

Last edited: 2020-08-13 07:14

View 2 revisions

Yes but if you turn off only one among SSL, TLS 1.1 and TLS 1.0 do you face the same trouble ?

GuruGabe

2020-08-13 20:27

reporter   ~0004006

I have enabled 1.0 and get the same thing. I would like for this to be straight 1.2 or even the newest 1.3 to be ahead of the curve for when Microsoft finally kills it.

Issue History

Date Modified Username Field Change
2020-08-12 16:03 GuruGabe New Issue
2020-08-12 16:12 GuruGabe Note Added: 0004000
2020-08-12 20:49 Kyle_Katarn Assigned To => Kyle_Katarn
2020-08-12 20:49 Kyle_Katarn Status new => feedback
2020-08-12 20:49 Kyle_Katarn Note Added: 0004001
2020-08-12 22:35 GuruGabe Note Added: 0004002
2020-08-12 23:12 Kyle_Katarn Note Added: 0004003
2020-08-12 23:56 GuruGabe Note Added: 0004004
2020-08-13 07:14 Kyle_Katarn Note Added: 0004005
2020-08-13 07:14 Kyle_Katarn Note Edited: 0004005 View Revisions
2020-08-13 20:27 GuruGabe Note Added: 0004006
2020-08-13 22:50 Kyle_Katarn Status feedback => acknowledged
2020-08-13 22:50 Kyle_Katarn Target Version => Short term