TLSv1.2 | Community
Skip to main content
Jason_Scott
Jason_Scott
Level 4
March 7, 2016
Question

TLSv1.2

  • March 7, 2016
  • 3 replies
  • 3779 views

We're using Marketo's webhook to connect with a vendor.  Today I was notified by this vendor they're "going to be shutting off anything that uses SSLv3 and TLSv1.1, so it is advised we switch to using TLSv1.2 at this time."  Any one else run into this issue?

Thanks!

Jason

    This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

    3 replies

    SanfordWhiteman
    SanfordWhiteman
    Level 10
    March 8, 2016

    You are quite right.  The webhook client side won't support servers that are locked to only TLSv1.2 at this time.  If you're going to lose connectivity immediately you could use a proxy temporarily (the proxy runs TLSv1.1 to/from you and TLSv1.2 to/from upstream).

    @Kenny Elkington​

    And Rajesh Talele Aruba Prod​ too

    Kenny_Elkington
    Adobe Employee
    Kenny_ElkingtonAdobe Employee
    Adobe Employee
    March 8, 2016

    We added support for TLS 1.2 in webhooks early last month.

    SanfordWhiteman
    SanfordWhiteman
    Level 10
    March 8, 2016

    I tested it before I posted -- it didn't work.  Reenabling SSL3/TLS1 still works.  I can do more tests later tonight.

    Grégoire_Miche2
    Grégoire_Miche2
    Level 10
    March 8, 2016

    Funny, SFDC just removed usage of TLSv1.0...

    -Greg

    Jep_Castelein2
    Jep_Castelein2
    Level 10
    March 16, 2016

    Marketo Webhooks have been upgraded with the Feb 5th release to support TLS 1.1 and 1.2. The immediate reason was the announcement that SFDC would stop supporting TLS 1.0 on Production orgs on March 4, 2017 (1 year from now). However, SFDC will be upgrading sandboxes sooner, and you can elect to upgrade your sandboxes today, so we wanted to be ready for that. 

    I don't know the details of the Feb 5th release, other than that it supports SFDC's new setup (which I believe still supports 1.1). It may be that a 1.2-only connection does not work yet (as Sanford's tests indicate).

    Grégoire_Miche2
    Grégoire_Miche2
    Level 10
    March 16, 2016

    Hi Jep,

    The corresponding "Critical Update" is already available in production instances of SFDC and can be "updated" at any moment by the SFDC admin who would not necessary know it would impact Marketo. So good news Marketo has been upgraded. The date of March 2017 is the deadline at which, if the SFDC have not activated the upgrade, it will be automatically updated by SFDC.

    -Greg

    Terms & ConditionsAccessibility statement

    Loading footer...