Results 1 to 8 of 8
  1. #1
    Join Date
    Aug 2017
    Posts
    4
    Plugin Contributions
    0

    Default Support For TLS 1.2

    I am currently using zen cart version 1.3.8a

    On Feb. 28, 2018 authorize.net will discontinuing support for TLS 1.0/1.1

    Will my current version of zen cart support TLS 1.2?

    thank you for your help

  2. #2
    Join Date
    Aug 2010
    Location
    Israel
    Posts
    285
    Plugin Contributions
    0

  3. #3
    Join Date
    Aug 2017
    Posts
    4
    Plugin Contributions
    0

    Default Re: Support For TLS 1.2

    thanks gunni for your reply but I would like an answer not your guess or bet.

    Is there anyone or someone from zen support that has a definite answer to the TLS 1.2 question?

    thank you

  4. #4
    Join Date
    Aug 2010
    Location
    Israel
    Posts
    285
    Plugin Contributions
    0

  5. #5
    Join Date
    Aug 2017
    Posts
    4
    Plugin Contributions
    0

    Default Re: Support For TLS 1.2

    thanks for the link gunni

    under configuration in the final report protocols, TLS 1.2 received a yes.

    I guess you would have lost that bet.

    thanks again
    have a great day

  6. #6
    Join Date
    Aug 2010
    Location
    Israel
    Posts
    285
    Plugin Contributions
    0

    Default Re: Support For TLS 1.2


    I knew I should not bet...

    But...with TLS1.2 or not, your Zen Cart version 1.3.8 is very
    risky and not secured....
    Last edited by gunni; 28 Aug 2017 at 08:18 PM.

  7. #7
    Join Date
    Dec 2009
    Location
    Amersfoort, The Netherlands
    Posts
    2,846
    Plugin Contributions
    25

    Default Re: Support For TLS 1.2

    Quote Originally Posted by gunni View Post

    I knew I should not bet...

    But...with TLS1.2 or not, your Zen Cart version 1.3.8 is very
    risky and not secured....
    And being over 10 years old, as soon as your host upgrades their php version your site wil not work anymore. So better start planning an upgrade to the latest and greatest version of Zen Cart

  8. #8
    Join Date
    Jan 2004
    Posts
    66,373
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: Support For TLS 1.2

    Quote Originally Posted by peter3 View Post
    I am currently using zen cart version 1.3.8a

    On Feb. 28, 2018 authorize.net will discontinuing support for TLS 1.0/1.1

    Will my current version of zen cart support TLS 1.2?

    thank you for your help
    The correct answer is: no.

    Re: the link gunni provided: It's good, and surprising, that your old outdated server has been tuned to support TLS 1.2.
    But unfortunately you've left your Zen Cart software get obsolete by not installing the updates to keep it contemporary.

    v1.3.8a is from 2007. This is now 2017. There have been 8 new versions, and 13 additional sub-versions published in those 10 years.

    The top reasons why you should upgrade are:
    a) TLS 1.2 support in v1.3.8a is questionable. It was designed for SSL, not TLS 1.2.
    b) v1.3.8a will no longer run on modern PHP versions. You must use old insecure unmaintained PHP versions in order to use the 2007 v1.3.8a code.
    c) Updated releases are published multiple times per year, so that you can keep up to date for compatibility with modern secure technology.
    d) Unfortunately v1.3.8a had dozens of security problems. They were all fixed in versions released after 1.3.8a.
    e) If your clients and customers knew you were intentionally running insecure software they probably wouldn't buy from you. You should be telling them what you're doing and why. It should be in big bold bright colors on your checkout pages.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 

Similar Threads

  1. v154 TLS 1.2 Support?
    By megmeister in forum General Questions
    Replies: 3
    Last Post: 26 Sep 2017, 12:25 PM
  2. v1.5.0 Authorizenet edit for TLS 1.2 - Security hash problem and Communications error
    By tewksco in forum Built-in Shipping and Payment Modules
    Replies: 11
    Last Post: 4 Nov 2016, 02:53 AM
  3. v151 Testing TLS with /extras/paypal_tlstest.php
    By Dave224 in forum PayPal Express Checkout support
    Replies: 2
    Last Post: 23 Apr 2016, 12:01 AM
  4. v150 email set-up for SMTP TLS
    By catach in forum Basic Configuration
    Replies: 5
    Last Post: 12 Jul 2012, 12:50 AM
  5. enable SSL or TLS authentication for email
    By Thannaree in forum General Questions
    Replies: 2
    Last Post: 13 Apr 2012, 06:29 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR