Change cryptographic protocol, ciphers, and certificates
- Last Updated: June 11, 2025
- 1 minute read
- OpenEdge
- Version 12.8
- Documentation
Progress OpenEdge supports TLS 1.2/1.3 as the
default cryptographic protocol. The table in Supported protocols, ciphers, and certificates for OpenEdge clients and servers lists the default ciphers. If you use an OpenEdge client or server
prior to 11.6, you can update the default protocol or cipher to one of the supported
protocols or ciphers as listed in the tables below.
For example, if you use a client prior to 11.6, it uses TLS 1.0 as the default protocol and AES128-SHA as the default cipher. An
OpenEdge 11.6 server uses TLS 1.2 as the default
protocol and and the default ciphers are also different as listed in the table. Thus,
for compatibility between these two versions, you must downgrade OpenEdge11.6 server to
use TLS 1.0 and AES128-SHA. Also the 11.6 default server certificate must be changed from
SHA256 to SHA1.
See Change the default protocols and ciphers for more details on changing the
default.