Avatar

Retiring earlier TLS versions 1.0 and 1.1 in favor of later versions 1.2 and 1.3

Fortnox uses TLS to encrypt information exchanged between systems. TLS is available in different versions and offers a number of algorithms (ciphers) for data encryption.
Fortnox regularly updates the supply to ensure that your data remains secure. We’re hereby retiring earlier TLS versions 1.0 and 1.1 in favor of later versions 1.2 and 1.3 for increased security.
The following ciphers will be supported in the future.

Hexcode

Cipher Suite Name
(OpenSSL)

KeyExch.

Encryption

Bits

Cipher Suite Name (IANA/RFC)

x1302
TLS_AES_256_GCM_SHA384
ECDH 253
AESGCM
256
TLS_AES_256_GCM_SHA384
x1303
TLS_CHACHA20_POLY1305_SHA256
ECDH 253
ChaCha20
256
TLS_CHACHA20_POLY1305_SHA256
xc030
ECDHE-RSA-AES256-GCM-SHA384
ECDH 256
AESGCM
256
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
x9f
DHE-RSA-AES256-GCM-SHA384
DH 2048
AESGCM
256
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
x1301
TLS_AES_128_GCM_SHA256
ECDH 253
AESGCM
128
TLS_AES_128_GCM_SHA256
x1304
TLS_AES_128_CCM_SHA256
ECDH 253
AESGCM
128
TLS_AES_128_CCM_SHA256
xc02f
ECDHE-RSA-AES128-GCM-SHA256
ECDH 256
AESGCM
128
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
x9e
DHE-RSA-AES128-GCM-SHA256
DH 2048
AESGCM
128
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

 

We will update our Acceptance environment today and we will perform these changes on the production environment 2020-02-10