TLSv1.3 Support for Git integration.

[williamson kevin <kw...@blueyonder.co.uk.INVALID>]

HI,


Our cloud provider for Git is deprecating the TLSv1.2 protocol.

We currently use NetBeans 9.0 which uses a netbeans module (org-netbeans-modules-git.jar) that is a wrapper for JGit,(org-eclipse-jgit.jar).


JGit was updated from 3.6.2 to 5.5.0 on Nov 1st 2019. Since JGit 3.6.2 was released on 21st Jan 2015, NetBeans 9.0 is clearly not TLSv1.3 compatible.


However, JGit version 5.5.0 uses bouncycastle version 1.6.1 to handle encryption and Transport Layer Security.

bouncycastle version 1.6.1 has the additional algorithms from TLSv1.3, but doesn't fully support TLSv1.2 onwards until version 1.6.5.


Please can you confirm whether NetBeans 12 will be able to connect to a git provider using TLSv1.3 only.
If not, when will this functionality be available.

Sorry if my analysis is incorrect.

Many Thanks
Kevin

Re: TLSv1.3 Support for Git integration.

[Neil C Smith <ne...@apache.org>]

On Thu, 23 Jul 2020 at 10:28, williamson kevin
<kw...@blueyonder.co.uk.invalid> wrote:
> We currently use NetBeans 9.0

NetBeans 9.0 is well out of support!

> JGit was updated from 3.6.2 to 5.5.0 on Nov 1st 2019. Since JGit 3.6.2 was released on 21st Jan 2015, NetBeans 9.0 is clearly not TLSv1.3 compatible.

JGit in NetBeans 12.0 and 12.1 is 5.5.1.  With 5.7.0 currently
intended for 12.2.

Bouncycastle appears to currently be 1.64.

If the current combo doesn't work for you, open a JIRA ticket against 12.1.

Best wishes,

Neil

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@netbeans.apache.org
For additional commands, e-mail: users-help@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists