![]() ![]() Today, the version which can be considered as widely supported is TLS 1.2. Please note: As of SAP notes 2765639 in AS ABAP, SAP note 2834475 in AS Java and SAP note 2939945 in SAP BusinessObjects BI Platform 4.x TLS 1.3 is currently not supported. ![]() They are so “fresh” that they aren’t supported in all products, yet. For example TLS 1.0 and TLS 1.1 have finally been flagged as deprecated by IETF (see rfc8996, which took them btw more than two and a half years (see ).Īnd others are the new kids on the block like TLS 1.3 and ETS (formerly known as eTLS). Some of the TLS versions are existing for more than 20 years and can be considered as weak. ![]() Since the main browser vendors decided to no longer support some TLS versions, every admin dealing with web applications had to learn at least in the recent months about the different TLS versions out there. : Updated recommendation regarding “Allow blind sending of a client certificate”. : Added info about changes to cipher suites and group assignment. Updates: : Added info about changes to TLS_FALLBACK_SCSV. Please also read the other blogposts of this series:ĬommonCryptoLib: TLS protocol versions and cipher suitesĬommonCryptoLib: SNC protocol versions and cipher suitesĬommonCryptoLib: Manage PSE files and SSO Credentials (cred_v2)ĬommonCryptoLib: Certificate Revocation List validation NET 3.0 (SAP NCo)Īll of these components have one thing in common: They make use of one or more communication protocols (e.g., HTTP, P4, IIOP, JDBC, LDAP) which nowadays should be secured using TLS (Transport Layer Security). various Kernel Tools (saphttp, sldreg, sapkprotp, sapcontrol, saphostcontrol, etc.).In the meantime the CCL is available in its latest version 8.5.x and is used by many SAP components. The CCL is not only a replacement for its predecessor but also for OpenSSL, which was used for example by SAP HANA in its early days (and up to SAP HANA 2.0 SPS01 for LDAP). Many years ago SAP deprecated the SAPCRYPTOLIB and introduced the CommonCryptoLib (CCL) as its successor. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |