Transport Layer Security (TLS) support on is removed from Microsoft’s Linux Software Repository
Microsoft announced, it will end the support for the insecure TLS 1.0 and TLS 1.1 protocols on its Linux Software Repository starting from September 23, 2020.
TSL is a secure channel used for encrypting the communication channels between site and web browsers. Original TLS 1.0 specification and its TLS 1.1 successor have been in use for last 20 years.
Linux Software Repository from Microsoft hosts a wide range of software products for Linux systems. Such products are built and supported by the company and are available for download from packages.microsoft.com via standard YUM and APT package repositories.
The company said on the Windows Message Centre, Microsoft builds and supports a variety of software products for Linux systems and makes them available via package repositories on packages.microsoft.com. To support modern security standards, packages.microsoft.com will discontinue support for package downloads over Transport Layer Security (TLS) 1.0 and 1.1 protocols as of September 24, 2020.”
Following to this, connections from any unsecure protocols “will no longer work as expected, and no support will be provided. To continue accessing the packages the organizations have to enable TLS 1.2 or newer version.
The company added, “Where possible, Microsoft recommends that organizations remove all TLS 1.0 and 1.1 dependencies in their environments and disable TLS 1.0/1.1 at the operating system level.”
Earlier in this month, Microsoft said, “TLS 1.3 eliminates obsolete cryptographic algorithms, enhances security over older versions, and aims to encrypt as much of the handshake as possible.”
Redmon also set this official retirement date for the TLS 1.0 and 1.1 protocols in office 365 on 15th of Oct, 2020.
“As previously communicated [..], we are moving all of our online services to Transport Layer Security (TLS) 1.2+ to provide best-in-class encryption, and to ensure our service is more secure by default,” the company statement on Friday in the MC218794 Microsoft 365 admin center announcement.
