SSL/TLS Security Enhancements
TLS 1.0 and 1.1 support ended on GitLab.com and API

TLS 1.0 and 1.1 support ended on GitLab.com and API

12/17/2018 · Melissa Farber

What this post added

This post announces the discontinuation of support for TLS 1.0 and 1.1 on GitLab.com and the GitLab API, mandating TLS 1.2 for all client connections. It cites PCI DSS 3.1 compliance and security vulnerabilities of older TLS versions as reasons. It also outlines specific client incompatibilities (Git-Credential-Manager-for-Windows prior to 1.14.0, Git on older Red Hat versions, JGit/Java releases < JDK 8, older Visual Studio versions) and provides remediation steps, primarily advising updates to newer versions or operating systems.

Read the original post ↗