Akana SaaS GLOBAL US-WEST-2 (Oregon); Restrict SSL protocols to TLS 1.2, and updated cipher suite list for Gateway components
Scheduled Maintenance Report for Akana
Completed
The scheduled maintenance has been completed.
Posted Oct 26, 2020 - 07:30 PDT
In progress
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Oct 26, 2020 - 06:30 PDT
Scheduled
For the Global US-WEST-2 (Oregon) environment; we will be disabling weak SSL protocols (TLS 1.0 and 1.1) and cipher suites for the *Gateway* component.

This concerns the Gateway components themselves in the *us-west-2 (Oregon)* region only.

This does NOT affect the Gateways in other Global regions: us-east-1 (VA) or eu-central-1 (DE); both of which had already been altered back on 6/24/20 (to restrict TLS to 1.2, and updated cipher suites).

The other Akana API Platform components had already been updated a few months back per the past schedule:
Global:
- PM Console; Weds 5/27/20
- API Portals; Weds 6/10/20
- Gateways; Weds 6/24/20

The SSL protocols being removed:
Protocol-TLSv1.0
Protocol-TLSv1.1

The supported SSL protocols after the update will be:
Protocol-TLSv1.2

PM Console and API Portal (developer portals) supported cipher suites after the update:
ECDHE-ECDSA-AES128-GCM-SHA256
ECDHE-RSA-AES128-GCM-SHA256
ECDHE-ECDSA-AES128-SHA256
ECDHE-RSA-AES128-SHA256
ECDHE-ECDSA-AES256-GCM-SHA384
ECDHE-RSA-AES256-GCM-SHA384
ECDHE-ECDSA-AES256-SHA384
ECDHE-RSA-AES256-SHA384
AES128-GCM-SHA256
AES128-SHA256
AES256-GCM-SHA384
AES256-SHA256

Gateway supported cipher suites (for inbound client requests) after the update:
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
TLS_RSA_WITH_AES_128_CBC_SHA256
TLS_RSA_WITH_AES_256_CBC_SHA256
TLS_RSA_WITH_AES_128_CBC_SHA
TLS_RSA_WITH_AES_256_CBC_SHA

If you have any questions or concerns regarding this, please reach out to Akana product support (support@akana.com) or your Akana account executive.
Posted Oct 23, 2020 - 09:19 PDT
This scheduled maintenance affected: Global Environment (API Gateway - US West).