Cannot pass TLSv1_1 or TLSv1_2 configuration options

[saghaulor]

After reviewing the httpi code, the gem hardcodes acceptable SSL_VERSIONS. The highest version available to pass as an argument from savon is TLSv1.

It's my understanding that with curl when you specify TLSv1, it will attempt to use the best available version of TLS. I imagine curb does the same thing (though I'm not certain.)

I have opened a pull request to httpi to support introspecting into OpenSSL to figure out what supported versions are available. This should make httpi compatible with Ruby 1.9+-2.x+

savonrb/httpi#136

After the issue is resolved in httpi, savon will need to be updated to include the newest version of httpi.

[tjarratt]

Hey @saghaulor thank you again for submitting the pull request to HTTPI and for raising this issue. It's really awesome to see such great people in the community that care enough about this to spend their time improving Savon.

I just released v2.8 of Savon that depends on v2.3 of HTTPI. Is that more or less what you were looking for? Is there anything else we can do?

[tjarratt]

Closing this for now but please reopen this if there is anything more we need to do to resolve this issue.

Thank you again @saghaulor!

[saghaulor]

Thank you!

[ReganRyanNZ]

Requesting to reopen this thread. I'm getting this error trying to access SalesForce with Savon 2.11.2

UNSUPPORTED_CLIENT: TLS 1.0 has been disabled in this organization. Please use TLS 1.1 or higher when connecting to Salesforce using https

Seems like ssl_version: :TLSv1 is still only TLS 1.0

[sroller]

Please see my response on SO. 2017-10-22 22:55 GMT-04:00 Regan Ryan <[email protected]>:

…

Requesting to reopen this thread. I'm getting this error trying to access SalesForce with Savon 2.11.2 UNSUPPORTED_CLIENT: TLS 1.0 has been disabled in this organization. Please use TLS 1.1 or higher when connecting to Salesforce using https Seems like ssl_version: :TLSv1 is still only TLS 1.0 — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#639 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAkYqLeg5ch_8QlhX-3kOlBzvmlGaXggks5svAAugaJpZM4C5VHQ> .

[kapishmalik]

Requesting to reopen this thread. I cannot pass TLSv1_1 or TLSv1_2 configuration options.