Many services are beginning to deprecate TLS 1.1. I am creating this issue to confirm that 1, the SMTP module will continue working with services that do not use TLS 1.1.

I recall this issue causing quite a bit of consternation #2983132: Error since Mail Provider turned off TLS 1.0 support. and I just wanted to be proactive this time.

I was made to think of this as I received a notice from Sparkpost that they will be deprecating TLS 1.1 in September.

Comments

bburg created an issue. See original summary.

dqd’s picture

dqd
Location London | N.Y.C | Paris | Hamburg | Berlin
commented
Status: Active » Postponed

Please let us "shape" this into a real issue or task or let's merge it with something concrete regarding this topic ...

GemQueen’s picture

GemQueen commented

I have three websites that authenticate using an outlook account. I just got this notice from Microsoft:

"We originally paused the retirement of TLS 1.0 and 1.1 in Office 365 (MC186218 June '20) due to these unprecedented times. As companies have pivoted their supply chains and countries have started to re-open, we have re-established a retirement date for TLS 1.0 and 1.1 in Office 365 to be October 15, 2020. As previously communicated (MC126199 in Dec 2017, MC128929 in Feb 2018 and MC186827 in July 2019), we are moving all of our online services to Transport Layer Security (TLS) 1.2+ toprovide best-in-class encryption, and to ensure our service is more secure by default."

It seems I have until 10/15/2020 to make sure outgoing email from my sites are using TLS 1.2 or greater. Will this module work with TLS 1.2? Or do I need to make other plans? I might be able to help out if you can point me in the right direction.

bob.hinrichs’s picture

bob.hinrichs commented

From AWS:
"We will begin deploying updates to the TLS configuration for Amazon CloudWatch Log APIs to a minimum of version TLS 1.2 by September 15, 2023, even if you still have connections using these versions. These deployments will complete by no later than December 31, 2023. This update removes the ability to use TLS versions 1.0 and 1.1 with all AWS APIs in all AWS Regions [1]."

bluegeek9’s picture

bluegeek9 commented
Status: Postponed » Fixed

You version of PHP and Open SSL determine which version of TLS are avaliable.

PHP 7.2 compiled with OpenSSL 1.0.2 supports TLS 1.0, 1.1, and 1.2.

PHP 7.4 compiled with OpenSSL 1.1.1 supports TLS 1.2 and 1.3.

Now that this issue is closed, please review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, please credit people who helped resolve this issue.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.