Back

Meldingen: API: Changes to Supported TLS Protocols and Cipher Suites

Gepubliceerd: 22.12.2020

We would like to inform you that we will be adding support for Transport Layer Security (TLS) version 1.3 and related cipher suites to our API connections (EPP, XRRP, HTTPs, SOAP, XML-RPC). In addition, we will be removing support for TLS versions 1.0/1.1 and related cipher suites.


We will deploy the TLS version 1.3 and the related cipher suites as well as the removal of TLS versions 1.0/1.1 in our live system on February 16, 2021, between 08:00-17:00 UTC (09:00-18:00 CET). During this time, you may experience API disconnections.


These changes will already be processed in our OT&E on January 12, 2021. We highly recommend that all resellers test their API connections in the OT&E environment prior to the deployment in the production environment on February 16, 2021.


Please note that you will not be able to use TLS version 1.0/1.1 or the related cipher suites to connect to our API after they have been removed. 


After the switch has been completed we will support:


Protocols:



  • TLS version 1.2 

  • TLS version 1.3 


Cipher Suites:



  • DHE-RSA-AES128-GCM-SHA256

  • DHE-RSA-AES256-GCM-SHA384

  • ECDHE-RSA-AES128-GCM-SHA256

  • ECDHE-RSA-AES256-GCM-SHA384

  • ECDHE-RSA-CHACHA20-POLY1305

  • TLS_AES_128_GCM_SHA256

  • TLS_AES_256_GCM_SHA38

  • TLS_CHACHA20_POLY1305_SHA256