When will TLS 1.0 and 1.1 removed from sapui5.hana.ondemand.com / ui5.sap.com?

[gregorw]

Hello SAPUI5 Experts,

currently the CDN Resources for SAPUI5 sapui5.hana.ondemand.com and ui5.sap.com get only a Grade B rating in the SSL Server Test from SSL Labs:

• sapui5.hana.ondemand.com
• ui5.sap.com
  

This is due to the fact that both still support TLS 1.0 and 1.1. What is the timeline getting this removed? Due to this fact our security auditors asked us to not use the CDN but create standalone bundles.

Best Regards
Gregor

[Margot · Accepted solution]

Since today, October 27, 2021

• https://sapui5.hana.ondemand.com/ and
• https://openui5.hana.ondemand.com/

TSL 1.0 and 1.1 got disabled and the current rating at SSL labs are with A+ grade

For https://ui5.sap.com this applies already since October 21, 2021, as far as I am aware..