TLSv1.1 support will be dropped from UH Login (CAS and Shibboleth IdP) and Grouper.  This is required to restore our SSL Labs server rating to an "A" and, in the case of UH Login, to ensure ongoing compliance with InCommon Federation Baseline expectations.  Additionally, we will also eliminate TLS ciphers that have been deemed weak by SSLLabs.

When:

• Production Environment: Sunday, July 11, 6:45  AM, 2021

Very little most likely

Our test environments ended TLSv1.1 support on December 1, 2020.  We also contacted all of the owners of the critical ERP applications and got confirmations they tested successfully, with one exception now mitigated.

It is recommended you at least lightly test your apps one more time in case anything in your environment has changed, if you can.

• December 2021 Blog: UH Login and Grouper Test to no longer support TLSv1.1

• Transport Layer Security (Wikipedia)

• Deprecating TLSv1.0 and TLSv1.1

• InCommon Baseline Expectations 2 (BE2)

• SSL Labs SSL Server Test