This is a public Forum  publicRSS

Topic

    Seethalakshmi S
    TLS 1.0 Deprecation Issue
    Topic posted March 20, 2017 by Seethalakshmi SExplorer 
    122 Views, 4 Comments
    Title:
    TLS 1.0 Deprecation Issue
    Content:

    I ran the TLS 1.0 Log Scanner tool and the result shows that is there TLS 1.0 traffic in the "Chat API Calls and "Custom PHP " 

    What are the next steps to follow in order to solve it? 

    Any help will be useful.

    Regards

    Seethalakshmi

    Answer

     

    • Ryan
    • Pramod V

      Recently I was smashing my head against for this error in my add-in: could not establish secure channel for ssl/tls with authority

      and this reminded me of TLS and then I added these lines of code in my initialization method and it started to work fine:

      ServicePointManager.SecurityProtocol = SecurityProtocolType.Ssl3;
      ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12;

      and in Custom script it only matters if you are using a cURL functionality add this line of code before exec:

      curl_setopt ($setuploginurl, CURLOPT_SSLVERSION, 2);//2 to 6 worked for me

      - VIP

    • Rasheed Ahamed

      Hi,
      For me it is the reverse scenario, I ran the TLS 1.0 Log Scanner Tool for both Test and Production environment and thankfully the result shows TLS 1.0 Traffic Not Found for any of the endpoints. Apart from disabling TLS 1.0 in the browser, what else actions I need to take in order to keep the OSvC and the Customer Portal work properly without any disruptions even after the deprecation date?

      Thanks in advance.
       

    • Seethalakshmi S

      Hi All,

      In Agent desktop, I am facing the TLS issue in the custom script PHP code.So I have added the below code in my php code.

      but its not working.

      Any help will be useful

      <script>
        var TLSWarningYUI,
        displayWarning = function(data) {
        if( data && data.tls_version.split(' ')[1] < 1.1 ){
          var devHeaderPanel = TLSWarningYUI.one("#rn_DevelopmentHeader");
          if(devHeaderPanel)
            devHeaderPanel.setStyle("top", "25px");
            var warningNode = TLSWarningYUI.Node.create(
              '<div id="oldtlswarning" style="background:rgba(0, 0, 0, 0) none repeat scroll 0 0;color:red;text-align:center;top:0">'
              + 'Your browser lacks certain basic security requirements, You should upgrade your browser to the latest version.'
              + '</div>');
       
            TLSWarningYUI.one("body *").insertBefore(warningNode);
          }
        };
       
        YUI().use('node-base', 'node-core', 'node-style', 'panel','event-base', function(Y){
              TLSWarningYUI = Y;
      });
       
      </script>
      <script src="https://www.howsmyssl.com/a/check?callback=displayWarning"></script>

      Thanks,

      Seethalakshmi