TLS 1.2 Update and APIs

TLS 1.2 Update and APIs

As we plan to retire support for older TLS versions (1.1 & 1.0) by 5th Dec 2018, our customers who use Application Program Interfaces(APIs) may need to perform some changes in their systems. 

Some versions of the platforms used may be compatible with TLS 1.2 by default, while some of them may not. However, it is quite simple to enable seamless integration of APIs with a few steps. 

What is API Integration?

API Integrations are applications or interfaces between other services and Zoho, which process requests and ensure smooth functioning of systems. The APIs communicate requests by transferring some data to a server and retrieving it back into the original application that was accessed.

It is necessary that TLS 1.2 encryption protocols are enabled in the API integrations in order ensure safe and smooth integrations. 

Actions Required for API Integration


If TLS 1.2 is not enabled by the end of October, after which TLS 1.1 and 1.0 will not be supported, API integrations will not function properly . It is recommended that you support TLS 1.2 before we make this change.


Platform

Version

Comments

Java

1.8

Compatible with TLS 1.2 by default.

1.7 and 1.6 (121 or higher)

Compatible with TLS 1.2 but not enabled by default. 


The following code will make it compatible with TLS 1.2 : 
SSLContext ssl = SSLContext.getInstance("TLSv1.2");


ssl.init(null, null, new SecureRandom());

HttpsURLConnection connection = (HttpsURLConnection) url.openConnection("https://tlstest.zoho.com/api");

connection.setSSLSocketFactory(ssl.getSocketFactory());

Below 1.6(121)

Not compatible by default and must be updated.


.NET

4.6 and above

Compatible with TLS 1.2 by default.

4.5

Compatible with TLS 1.2 but not enabled by default.


The following code will make it compatible with TLS 1.2.
ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12


Note: Must be executed before making a connection to secured resource: 

Below 4.5

Not compatible by default and must be updated.


Ruby

2.0.0

TLS 1.2 is enabled by default when used with OpenSSL 1.0.1 or higher versions.

1.9.3 and below

Not compatible by default and must be updated.


Python

2.7.9 and above

Compatible with TLS 1.2 by default.

2.7.8 and below

Not compatible by default and must be updated


OpenSSL

1.0.1 and higher

Compatible with TLS 1.2 by default.

Below 1.0.1

Not compatible by default and must be updated

How to test the compatibility of an API:


  1. Access the following API in a manner similar to that of accessing your existing API integration:


  2. If the response looks like the one below, it can be understood that you are connecting to our APIs using TLS 1.2.

{"status": 200,"message": "Connection Success","version": "TLSv1.2"}

          

If the response says "Connection failed", the changes mentioned above must be implemented to continue integrating with our APIs.

 

As the end of support for older versions is approaching, it is advisable to check and update your TLS versions. For further queries, security@zohocorp.com can be contacted. 






    • Sticky Posts

    • Zoho MVP Batch of 2023

      Image: Zoho MVP Batch of 2023 Presenting the Zoho MVPs for 2023: Michael Trow Damien Cregan Kevin Flynn Donald Love Gordon Mankelow Abhishek Sharma Nik Khairul Bryan Pape Hugh Marshall Bhoomi Joshi Mikhail Koval Ken Florian Sven Rösser Our MVPs are passionate

    • Thanksgiving 2022 - Celebrating Zoho Community SuperBuds

      One of the things we love most about our Zoho User Community is how readily our users help each other out, and share their Zoho and business knowledge. Be it the community forums, the virtual and in-person meetups, or Zoholics, it's been heart-warming

    • Zoho MVP Batch of 2022

      Image: Zoho MVP Batch of 2022 Zoho MVPs are passionate customers and partners who go out of their way in helping the community members. With their significant contributions in the community forums, they help cut short the learning curve of the members,

    • ZOHO-20 to fight COVID-19

      While the world economy is taking a hit, we, at Zoho, are doing our bit to help small businesses come out of this crisis. Here are all the programs and packages offered by Zoho to fight Covid-19. 1. ESAP: The Small Business Emergency Subscription Assistance Program (ESAP) gives our severely impacted small business customers access to Zoho software they currently use, free for three months. All Zoho customers with 25 employees or fewer who have been severely impacted by the coronavirus-related downturn

    • ​Issues with Forum posts approval in Zoho Community

      Hi All, Issue: Some of you have reported that the posts/comments made today are going for moderation. The issue started few hours ago, and the behaviour was reported in CRM and Creator Forums by a few customers/partners. We were able to see the same problem in a few other product forums too. How it impacts you: Don't worry if you find that your posts and comments are stuck in moderation. Your posts/comments are safe. Please don't duplicate them. We're keeping a tab on the development and approving