Has anyone else noticed that TLS 1.0 is still required to use Cloudberry products? Back in March of 2017 with release 5.5 Cloudberry stated that they supported TLS 1.2 but they seem to have overlooked that TLS 1.0 is still a necessary component to use the software. We are business that uses Cloudberry for our backups and we focus heavily on security. Per the PCI DSS requirements of disabling insecure protocols such as TLS 1.0 by June 30, 2018 we disabled it on our servers (SCHANNEL) and Cloudberry ceased to function. It's been brought to their attention and they're working on fixing this mishap. I was told that it would be fixed with release 5.9.1 end of June/early July but now it seems they pushed it back to release 5.9.5 in August!
I'd like to know if anyone has noticed this and how it's affecting you. (2 votes)
I can confirm that our software does support TLS 1.2
If TLS 1.0 works for you, but TLS 1.2 doesn't this should be investigated. It might be that when you turn off TLS 1.0, you also disable some cipher suites, that were the only ones supported by both client and server.
Network capture of TLS handshake can shed some light on the problem
That's great news. Glad you are up and running. If there are any specifics of the changes you made you'd like to share with the community, I'm sure they would be grateful.