Page MenuHomePhabricator

Wikia only supports TLS 1.2
Closed, ResolvedPublic

Description

Wikimedia does TLS 1.0 and TLS 1.2.... Wikia only does TLS 1.2

We're going to need to look at doing something conditional based on .NET version... Or maybe it's time we just bump the version completely? We need to go to .NET 4.5

Event Timeline

Reedy added subscribers: Rjwilmsi, Magioladitis.

So... @Magioladitis @Rjwilmsi we're pretty much going to have to jump to .NET 4.5

Thoughts? Complaints? Do your IDE's support that?

I'm guessing I need to do the overdue release, and then look at bumping .NET versions

Wikimedia are going to be dropping TLS 1.0 soon... So yes, we basically have to do this

https://phabricator.wikimedia.org/phame/post/view/111/wikipedia_goes_100_forward_secret/

Reedy triaged this task as High priority.Aug 17 2018, 1:13 AM

OK, @Reedy so as suggested let's please do next release on existing .NET 3.5 then a second release on .NET 4.5. If we leave both as enabled then that will give users some time to sort out any required .NET upgrades (Wikimedia has already dropped support for XP users as I understand it so this 3.5 to 4.5 bump should not affect any newer Windows versions).

For me personally, I know that mono 5.10 and .NET 4.0 work together for AWB (MonoDevelop compile with one local patch for the webbrowser refactor that mono doesn't like, run under wine). And a .NET 4.0 little project of mine runs under wine using .NET 4.0 features. And .NET 4.5 does install under wine 1.8.1 and runs current AWB (.NET 3.5) fine. .NET 4.5 install failed on wine 2.0.1, haven't retested newer wine versions yet. So overall .NET 4.5 should already work but haven't actually tested the combination, and I'll have to make it work once WikiMedia require TLS 1.2.

Ok. 5.10.0.0 released.

5.10.0.1 supports TLS 1.1 and TLS 1.2 by using .NET 4.5

Need to do a bit more testing and poking..

We should disable some older versions (making people use 5.10.0.0, so we get tagging and stuff), and then at possibly releasing 6.0.0.0 as a .NET 4.5 release in the next couple of weeks

I'm going to get a 6.0.0.0 release out later this week

any updates on this new update?

See above. It's committed, working. Not released yet as I'm waiting on other bug reports in the software to die down a little

any updates on this new update?

See above. It's committed, working. Not released yet as I'm waiting on other bug reports in the software to die down a little

Since it's a question of release (you committed the changes) and not implementation at this point (for which I opened a task), would it be reasonable to close this one resolved?

Reedy claimed this task.

But the problem is still,perhaps it's none of TLS 1.2 problem.

But the problem is still,perhaps it's none of TLS 1.2 problem.

It is. Because less than .NET 4.5 doesn’t support TLS 1.1 and 1.2. Wikia only supports TLS 1.2

I tested it working

It’s working fine for other people who have upgraded