We are deprecating TLSv1.0 and TLSv1.1 on our Dashboard URLs. This support article contains information about what is currently supported and regarding this change.
What TLS versions are currently supported?
Going forward(From 20th Feb 2023), Exotel will only support TLS v1.2 for the Dashboard URLs.
Why are TLSv1.0 and TLSv1.1 deprecated?
Security best practices strongly advise against the use of early/older TLS versions for secure communications on the web. As a consequence, Exotel decided to no longer support SSL or early TLS versions before v1.2 for our Dashboard URLs. This action has been taken to maintain the highest standard of security for our customers.
How do I test whether the change will affect my environment?
The best way to determine if your environment is affected by the TLS changes is to make a simple HTTP request to Exotel’s Dashboard URLs from your browser. If the dashboard URL works successfully, no changes will be necessary for your environment.
What if I get errors while testing Dashboard URLs?
Most likely the errors you receive will be due to having an OpenSSL browser version that does not offer support for TLSv1.2. To correct this, you should update your browser which supports TLSv1.2.
Tips for Upgrading Your Environment to Support Exotel Dashboard TLS Changes
Starting 20th Feb 2023, the Exotel dashboard will only support connections that use TLSv1.2. If your environment fails to connect to our Dashboard URLs, you may need to upgrade your browser to be compatible with these changes.
Which cipher suites are supported by the dashboard with the change to TLSv1.2?
From 20th Feb 2023 Exotel dashboard supports ONLY TLSv1.2 and the following cipher suites:
- ECDHE-ECDSA-AES128-GCM-SHA256
- ECDHE-RSA-AES128-GCM-SHA256
- ECDHE-ECDSA-AES128-SHA256
- ECDHE-RSA-AES128-SHA256
- ECDHE-ECDSA-AES128-SHA
- ECDHE-RSA-AES128-SHA
- ECDHE-ECDSA-AES256-GCM-SHA384
- ECDHE-RSA-AES256-GCM-SHA384
- ECDHE-ECDSA-AES256-SHA384
- ECDHE-RSA-AES256-SHA384
- ECDHE-RSA-AES256-SHA
- ECDHE-ECDSA-AES256-SHA
- AES128-GCM-SHA256
- AES128-SHA256
- AES128-SHA
- AES256-GCM-SHA384
- AES256-SHA256
- AES256-SHA
Which browsers are supported by the dashboard with the change to TLSv1.2?
Android 4.4.2
Android 5.0.0
Android 6.0
Android 7.0
Android 8.0
Android 8.1
Android 9.0
BingPreview Jan 2015
Chrome 49 / XP SP3
Chrome 69 / Win 7
Chrome 70 / Win 10
Chrome 80 / Win 10
Firefox 31.3.0 ESR / Win 7
Firefox 47 / Win 7
Firefox 49 / XP SP3
Firefox 62 / Win 7
Firefox 73 / Win 10
Googlebot Feb 2018
IE 11 / Win 7
IE 11 / Win 8.1
IE 11 / Win Phone 8.1
IE 11 / Win Phone 8.1 Update
IE 11 / Win 10
Edge 15 / Win 10
Edge 16 / Win 10
Edge 18 / Win 10
Edge 13 / Win Phone 10
Java 8u161
Java 11.0.3
Java 12.0.1
OpenSSL 1.0.1l
OpenSSL 1.0.2s
OpenSSL 1.1.0k
OpenSSL 1.1.1c
Safari 6 / iOS 6.0.1
Safari 7 / iOS 7.1
Safari 7 / OS X 10.9
Safari 8 / iOS 8.4
Safari 8 / OS X 10.10
Safari 9 / iOS 9
Safari 9 / OS X 10.11
Safari 10 / iOS 10
Safari 10 / OS X 10.12
Safari 12.1.2 / MacOS 10.14.6 Beta
Safari 12.1.1 / iOS 12.3.1
Apple ATS 9 / iOS 9
Yahoo Slurp Jan 2015
YandexBot Jan 2015
Failure Signatures
These are some common error messages that may indicate your system does not support the security changes:
- The server aborted the SSL handshake
- Connection refused
- Handshake failed
- Unable to connect to the remote server
- The connection was forcibly closed by the remote host
- Connection timed out
Components to Check
There are several components involved in connecting to our dashboard URL that may need to be upgraded or reconfigured to use TLSv1.2:
- Browser
- Network Proxy
- Firewall
In most cases, you simply need to upgrade your browser to its latest version.
In rare cases, you may have a network proxy or firewall that does not support or is not configured correctly for TLSv1.2 connections. You’ll need to consult with your network administrator if you suspect that is the issue.
Every environment is different, so we recommend you consult your browser documentation and IT support staff or vendor to thoroughly investigate and upgrade the affected components.
Verifying the Upgrade
Once you’ve made the necessary changes, verify your upgraded system can connect successfully to the same dashboard URL from your browser, using the same testing procedures.
If you have any questions or concerns, please connect with us using the chat widget on your Exotel Dashboard or Whatsapp us on 08088919888