topic Re: Sandbox RC4 Cipher in Integration and Testing

Sandbox RC4 Cipher

seven7 — Mon, 02 May 2016 19:44:19 GMT

Hello,

has RC4 cipher been disabled in the sandbox? It appears to still be active.

Received email couple weeks ago that RC4 would be disabled in sandbox on April 29, and disabled in production on May 31.

Re: Sandbox RC4 Cipher

Lilith — Tue, 03 May 2016 17:55:33 GMT

@seven7 We're looking into this. Thanks.

Re: Sandbox RC4 Cipher

larrymcp — Tue, 03 May 2016 19:31:47 GMT

Thanks, guys for posting this and for checking on it-- I came to the forum specifically to ask about this, and was pleased to see it's already being looked at. I want to test us out on the sandbox server to make sure we've got no issues with RC4 being disabled.

Re: Sandbox RC4 Cipher

Lilith — Fri, 06 May 2016 20:42:03 GMT

Due to circumstances beyond our control, we've had to push the disablement of RC4 in Sandbox, to Tuesday, May 10.

You should be able to test your integrations against Sandbox, to confirm you've remediated against RC4 support, by Wednesday, May 11.

I apologize for the delay.

Re: Sandbox RC4 Cipher

larrymcp — Fri, 06 May 2016 21:31:10 GMT

Thank you-- appreciate the update!

Re: Sandbox RC4 Cipher

seven7 — Wed, 11 May 2016 13:59:56 GMT

Hello,

My test still showing RC4 as an accepted cipher on the sandbox url (test.authorize.net)

can you confirm RC4 was disabled on Tuesday, May 10?

thank you

Re: Sandbox RC4 Cipher

Lilith — Wed, 11 May 2016 18:14:52 GMT

@seven7 Unfortunately, we had to push this out one more day. But we expect this to be disabled tonight (Wednesday, May 11) after 10 pm Pacific.

I'll be checking on the cipher status to confirm it's disabled, and will post confirmation to this thead.

We apologize for the further delay.

Re: Sandbox RC4 Cipher

RichardH — Thu, 12 May 2016 13:23:32 GMT

Hello,

RC4 is now disabled in the sandbox and is ready for testing.

Richard