Switch to disable TLS v1.0 and v1.1 (TLS v.1.2 only)
Details
| Detail name | Value |
|---|---|
| Changelog Number | 6048 |
| Type | Improvement |
| Status | Resolved |
| Fix Versions | EXASOL 6.0.9 |
| Resolution Date | 2018-04-27 |
Support for TLS v1.0 and TLS v1.1 (early TLS) will be disabled by default for version 6.1 (see EXASOL-2171).
Furthermore version 6.0.9. allows to explicitly disable TLS 1.1
If this option is set Exasol allows v1.2 connections only.
Customers may now also disable early TLS explicitely starting with version 6.0.9:
- Early TLS for HTTPS interfaces of EXAoperation can be disabled by setting the option "Disable Early TLS for EXAoperation Interfaces" in the Network tab.
- Early TLS for remote backups via HTTPS/FTPS can be disabled by setting the remote archive volume option "noearlytls".
- Early TLS for database connections (SQL IMPORT/EXPORT using HTTPS/FTPS and local secure import via EXAplus or JDBC) can be disabled by setting the extra database parameter "-etlCurlCipherList=HIGH:-SSLv3:-TLSv10:-eNULL:-aNULL:-3DES"
