Information

Title	Does Progress support TLS 1.2 with ECDHE suite of ciphers when using .Net Open Client?

URL Name	Does-Progress-support-TLS-1-2-with-ECDHE-suite-of-ciphers-when-using-Net-Open-Client

Article Number	000184684

Environment	Product: OpenEdge Version: 11.6 OS: all supported platforms

Question/Problem Description

Does Progress support TLS 1.2 with ECDHE suite of ciphers when using a .Net Open Client?

Steps to Reproduce

Clarifying Information

The .Net framework used by the OpenEdge .Net Open Client has its own set of supported SSL ciphers and settings.
When .Net initiate an SSL connection through the OpenEdge .Net Open Client then the .Net SSL ciphers and settings are being used. (not the 4GL SSL ciphers and settings)

Error Message

Defect Number

Enhancement Number

Cause

Resolution

No, the ECDHE suite of ciphers is not supported by the .Net version supported by OpenEdge 11.6

The .Net versions supported for various OpenEdge versions can be found in the following article:
Which .NET Framework Versions are supported with OpenEdge?

For the full list of the .Net SSL ciphers and settings supported by a specific Microsoft .Net framework version the Microsoft .NET documentation from the specific .Net version will need to be consulted.

Workaround

Notes

The OpenSSL renamed utility sslc shipped with OpenEdge11.6 (related to 4GL SSL connections) does support ECDHE.
An s_client connection test (related to 4GL SSL connections) as described on:
How to test connectivity when using SSL
using the ECDHE cipher does succeed in OpenEdge 11.6.

Keyword Phrase

Last Modified Date	11/29/2022 2:39 PM

Does Progress support TLS 1.2 with ECDHE suite of ciphers when using .Net Open Client?

Information