Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Does Bitbucket have a URL for tsl1.2 I can test my environment on?

zsolt_bitbucket November 27, 2018

I just found out bitbucket is moving to TSL 1.2 Dec 1st and the steps shown to check seem to indicate I am exposed.

https://bitbucket.org/blog/deprecating-tlsv1-tlsv1-1-2018-12-01

The problem is, my indicated SSL verison does not say TLS1.2 as the documentation above indicates.

GIT_CURL_VERBOSE=1 git ls-remote https://bitbucket.org/  2>&1 | grep SSL
        SSL connection using TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

... BUT...

I ran an experiment which leads me to think I am OK.

curl --tlsv1.2 -v https://tlstest.paypal.com 2>&1 | grep SSL* SSL connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256


To double check this, curl --tlsv1.1  https://tlstest.paypal.com 

     ERROR! Connection is using TLS version lesser than 1.2. Please use TLS1.2

Can anybody in the community comment on this?  If we cannot access bit bucket, I need to know ahead of time so I can continue to troubleshoot.   My versions of openssl and git are up to date.

1 answer

1 vote
jredmond
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
November 28, 2018

It looks like you're using a curl version that does not include the TLS version string (that was introduced in curl version 7.40.0, which was released in January 2015). Since you're able to connect to other sites using TLSv1.2, though, and since your output lists both GCM and SHA-256 (both of which are unsupported in older TLS versions), you should be OK here.

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events