Does Bitbucket have a URL for tsl1.2 I can test my environment on?

unknown

I just found out bitbucket is moving to TSL 1.2 Dec 1st and the steps shown to check seem to indicate I am exposed.

https://bitbucket.org/blog/deprecating-tlsv1-tlsv1-1-2018-12-01

The problem is, my indicated SSL verison does not say TLS1.2 as the documentation above indicates.

GIT_CURL_VERBOSE=1 git ls-remote https://bitbucket.org/  2>&1 | grep SSL
        SSL connection using TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

... BUT...

I ran an experiment which leads me to think I am OK.

curl --tlsv1.2 -v https://tlstest.paypal.com 2>&1 | grep SSL* SSL connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

To double check this, curl --tlsv1.1  https://tlstest.paypal.com 

     ERROR! Connection is using TLS version lesser than 1.2. Please use TLS1.2

Can anybody in the community comment on this?  If we cannot access bit bucket, I need to know ahead of time so I can continue to troubleshoot.   My versions of openssl and git are up to date.

jredmond

It looks like you're using a curl version that does not include the TLS version string (that was introduced in curl version 7.40.0, which was released in January 2015). Since you're able to connect to other sites using TLSv1.2, though, and since your output lists both GCM and SHA-256 (both of which are unsupported in older TLS versions), you should be OK here.