Roberta Telia asked a question.
undefined (5/14/2024, 3:28:51 PM): im connecting with a .net application and thus im restricted to the build in cypher suits of windows server 2012 r2
Manjunath V (5/14/2024, 3:29:27 PM): Could you try accessing the below link:
undefined (5/14/2024, 3:29:51 PM): yes, i can access that page
undefined (5/14/2024, 3:30:06 PM): is there anything specific you want to show me there?
Manjunath V (5/14/2024, 3:30:46 PM): I though that you are trying to access the Podio APi website and shared you that link
Manjunath V (5/14/2024, 3:30:58 PM): Kindly let me know if that is not which you are looking for
Manjunath V (5/14/2024, 3:31:42 PM): https://developers.podio.com/ is similar to api.podio.com
undefined (5/14/2024, 3:31:45 PM): my .net app is connecting the the api endpoint: api.podio.com:443
undefined (5/14/2024, 3:31:55 PM): it fails to negotiate a tls 1.2 connection
undefined (5/14/2024, 3:32:06 PM): probably due to mismatch in cypher suit
undefined (5/14/2024, 3:32:14 PM): it has been working unchanged the last 4 years
undefined (5/14/2024, 3:32:21 PM): but stopped working this morning
Manjunath V (5/14/2024, 3:33:46 PM): kindly change the .net configuration to try connecting to developers.podio.com instead of api.podio.com
Manjunath V (5/14/2024, 3:37:45 PM): Hello, are you still with us? If you need more time, please don't hesitate to let me know. If I don't hear back within the next few minutes, I'll have to end this chat.
undefined (5/14/2024, 3:38:51 PM): it still fails
undefined (5/14/2024, 3:39:13 PM): i can give you a list of the tls 1.2 cypher suits that my client offers on handshake
undefined (5/14/2024, 3:40:04 PM): Cipher Suites (26 suites)
Cipher Suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)
Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027)
Cipher Suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)
Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)
Cipher Suite: TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x009f)
Cipher Suite: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x009e)
Cipher Suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x0039)
Cipher Suite: TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x0033)
Cipher Suite: TLS_RSA_WITH_AES_256_GCM_SHA384 (0x009d)
Cipher Suite: TLS_RSA_WITH_AES_128_GCM_SHA256 (0x009c)
Cipher Suite: TLS_RSA_WITH_AES_256_CBC_SHA256 (0x003d)
Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA256 (0x003c)
Cipher Suite: TLS_RSA_WITH_AES_256_CBC_SHA (0x0035)
Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA (0x002f)
Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (0xc02c)
Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b)
Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (0xc024)
Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (0xc023)
Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a)
Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009)
Cipher Suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 (0x006a)
Cipher Suite: TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 (0x0040)
Cipher Suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA (0x0038)
Cipher Suite: TLS_DHE_DSS_WITH_AES_128_CBC_SHA (0x0032)
Cipher Suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a)
Cipher Suite: TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA (0x0013)
undefined (5/14/2024, 3:41:18 PM): and according to ssl labs test page, your web server only accepts these cypher suits on tls v1.2:
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) ECDH x25519 (eq. 3072 bits RSA) FS 128
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030) ECDH x25519 (eq. 3072 bits RSA) FS 256
undefined (5/14/2024, 3:43:14 PM): https://www.ssllabs.com/ssltest/analyze.html?d=api.podio.com&s=54.171.146.235
Manjunath V (5/14/2024, 3:45:12 PM): https://support.sharefile.com/s/topic/0TODn000000ghsdOAA/podio
kindly post the quarry on the above link and a developer will be able to assist you with establishing the connection.
Manjunath V (5/14/2024, 3:46:29 PM): Could you share the error screenshot of the issue
Hey All 👋
We made this post back in December 2023 :
Security Update - Disabling TLS 1.1
What is happening? TLS stands for “Transport Layer Security”. We use it to secure communication between all Web and API client interactions with the Podio service. To further strengthen the security of sensitive data, the Podio service will no longer support TLS 1.1 from 30th September 2020. What you need to do by 30th September 2020? As web-app users, ensure you are using browsers that support TLS 1.2, most modern web browsers are compliant with TLS 1.2 protocol. As Podio API client developers, ensure you are connected to the Podio API server using TLS 1.2. This applies to private, public and partner applications connecting to the Podio API. Please note, Podio Workflow Automation service has already deprecated TLS 1.1 (or lower) protocol based connections. Only TLS 1.2 protocol based connections are supported. No action needed by Podio Workflow Automation users.
Best, Podio Team