Disable TLS v1.0 and v1.1 for Websocket Connections
Details
| Detail name | Value |
|---|---|
| Changelog Number | 6461 |
| Type | Improvement |
| Status | Resolved |
| Fix Versions | Exasol 6.0.11 |
| Resolution Date | 2018-07-17 |
As announced in EXASOL-2250, TLS v1.0 and v1.1 (i.e. early TLS) can be disabled optionally for several interfaces since version 6.0.9. However, this change did not include an option to disable early TLS for websocket clients.
We will now also block early TLS connections from websocket clients, starting with version 6.0.11. We decided to make this an immutable setting (i.e. not changeable). As such, if you use websocket clients, please ensure that they announce TLS v1.2 for initiating secure connections to the database.
Please also bear in mind that early TLS will also be disabled by default for all interfaces starting with version 6.1.0, see EXASOL-2171.
Changed behavior
Early TLS (v1.0 and v1.1) was completely disabled for Websocket client connections.
