Support for TLS 1.1 and TLS 1.2 is implemented starting with
OpenEdge 11.6OpenEdge 10.2B, and OpenEdge 11.3 through 11.5 can support TLS 1.0 with appropriate hotfixes applied. See article
How does the POODLE vulnerability affect OpenEdge ? for further details.
For all earlier versions the ABL client only fully supports SSLv2 and SSLv3 protocols when connecting a OpenEdge client to an OpenEdge Server. These do not provide full TLS support.
Specifically, the TLS Hello message/handshake to initialize a connection is not implemented. As a result, the client can not connect to servers that enforce strict mode.
However, if strict mode is
not enforced the OE client
can connect to an external non-OE server configured for TLSv1.0, and use TLSv1.0. This can be tested with Progress customized version of OpenSSL, for example:
sslc s_client -connect hostname:443
Look for the following section at the bottom of the output:
SSL-Session:
Protocol : TLSv1
Cipher : AES256-SHA