How Do I Upgrade TLS?

Symptom

CodeArts Repo aims to provide secure, reliable, stable, and fast code hosting services, and always puts the code security first.

In 2018, CodeArts Repo announced the drop of TLSv1.0. Since January 11, 2019, TLsv1.0 is no longer supported in the following aspects:

TLSv1: All HTTPS web, API, and Git connections to CodeArts Repo.

Analysis

Many clients can automatically switch to use new algorithms.
The few clients affected are legacy systems that are no longer maintained and continue to connect to Git or CodeArts Repo APIs using TLSv1.0.

Solution

If the Git Bash installed on your computer is earlier than 2.6.0, upgrade it to the latest version. The latest Git supports TLSv1.2 by default.
You can run the following command to check the TLS version of the local Git Bash:
```
git config http.sslVersion
```
If the version is TLSv1.0, run the following command to upgrade it to TLSv1.2:
```
git config --global http.sslVersion tlsv1.2
```

**Table 1** Known incompatible clients
Client	Description
Git Credential Manager for Windows< v1.14.0	TLSv1.2 is not supported. Upgrade the Git client to the latest version. Select to install the Git Credential Manager during the upgrade.
Git on Red Hat 5	TLSv1.2 is not supported. Upgrade to a later version.
Git on Red Hat 6	Upgrade to 6.8 or a later version.
Git on Red Hat 7	Upgrade to 7.2 or a later version.
JDK 7	TLSv1.0 is used in JDK 7 by default. Any client, such as Eclipse JGit, running on an earlier version of JDK is affected. This can be resolved by enabling TLSv1.2 in JDK 7.
JDK 6 and earlier versions	TLSv1.2 is not supported. Upgrade to a later version.
Visual Studio	Visual Studio comes with specific versions of Git for Windows and Git Credential Manager for Windows (GCM). Microsoft has updated the latest version of Visual Studio 2017 to work with the TLSv1.2 Git server. We recommend that Visual Studio users upgrade to the latest version by clicking the in-product notification flag or checking for updates directly from the IDE. Microsoft has provided additional guidance on the Visual Studio developer community support forum.

Third-party Git GUIs

If you use a third-party Git client, such as Eclipse, JetBrains, SourceTree, VSCode, Tower, or TortoiseGit, you are advised to download the latest Git Bash and use the native Git instead of the built-in type in the tool.