Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-29288

TLS 1.2 depreciation

XMLWordPrintable

      Hi there,

      I was wondering if we can have the SSL subsystem move away from TLS 1.2 and use forward secrecy and either AES-GCM or CHACHA20_POLY1305 as per the depreciation of TLS features / algorithms?
      I am by no means an expert but I noticed when I enabled HTTPS on the default jenkins install (from a fresh apt-get on a new machine) and imported my SSL certificates into the keystore, that the first warning that Chrome gave was about the outdated TLS 1.2 connection method.

        1. tls.png
          tls.png
          9 kB

          [JENKINS-29288] TLS 1.2 depreciation

          Ian Moroney created issue -
          R. Tyler Croy made changes -
          Workflow Original: JNJira [ 164158 ] New: JNJira + In-Review [ 181531 ]
          Oleg Nenashev made changes -
          Component/s New: core [ 15593 ]
          Component/s Original: security [ 15508 ]

            Unassigned Unassigned
            lazarix Ian Moroney
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated: