[ic] TLS upgrade

[Jon Jensen]

On Thu, 21 Sep 2017, David Etheredge wrote:

> Is interchange currently enabled for TLS 1.2 ?  We received the 
> following notice: ensure you are no longer using TLS 1.0 or 1.1 prior to 
> September 18th 2017.

Interchange itself doesn't do TLS -- that's a function of your web server 
(often Apache httpd), your Perl libraries (for LWP, etc.), your system 
libraries curl, wget, and openssl.

The first thing to consider is your server OS and OpenSSL libraries. I 
wrote about this a couple of years ago:

http://blog.endpoint.com/2015/07/e-commerce-website-encryption-changes.html

If you're using an unsupported distribution such as RHEL 5, CentOS 5, 
Debian 6, or Ubuntu before 12.04, you probably don't have TLS 1.2 support, 
and have other security problems on such an OS.

Jon


-- 
Jon Jensen
End Point Corporation
https://www.endpoint.com/