TLS 1.2 support?

[jbrowne]

It appears that v1.5.5 does not support TLS 1.2. With the Google Chrome 81 and Firefox 74 dropping support TLS 1.0 and 1.1, I may need to keep an old browser version around to access the web interface.

Any news on when TLS 1.2 will be supported?

See:
* https://blog.chromium.org/2019/10/chrome-ui-for-deprecating-legacy-tls.html
* https://hacks.mozilla.org/2020/02/its-the-boot-for-tls-1-0-and-tls-1-1/

Tested 1.5.5. with:

Code: Select all

for opt in tls1 tls1_1 tls1_2; do echo '' | openssl s_client -${opt} -connect 10.xx.yy.zz:443 >/dev/null 2>&1; if [ $? == 0 ]; then echo "${opt}: works"; else echo "${opt}: fails"; fi; done

tls1: works
tls1_1: fails
tls1_2: fails


[Stephen]

RebusCom just brought this to our attention as well. An update will be out soon.

[StrataNet]

Also requesting this - have just updated browser to FF v78.0.2 and had a warning regarding this. They say that TLS 1.0 and TLS 1.1 will be permanently disabled in a future release.

[Stephen]

This is on the todo list. We do have some time before it cause's any issue's. Working on a new release now.

[kiwibrew]

Can we have an update for when TLS 1.2 will be enabled? Nothing mentioned in the most recent firmware about it.

[Stephen]

I will be making a post about it soon.

[suge]

we must be on the ubiquiti forums...