Yelp / yelp-fusion

Yelp Fusion API
https://yelp.com/developers
MIT License
401 stars 394 forks source link

API v3 SSL connection errors #693

Closed Sp23-23 closed 5 months ago

Sp23-23 commented 12 months ago

Overview

Description

System.Security.Authentication.AuthenticationException: Authentication failed because the remote party sent a TLS alert: 'HandshakeFailure'. System.ComponentModel.Win32Exception (0x80090326): The message received was unexpected or badly formatted.

More information

My server is a Microsoft Windows Server 2012 R2 and it is configured to use a TLS 1.2 protocol as it is the highest supported TLS version. Your server seems to be using the newest TLS 1.3 protocol which is not supported by my server.

Endpoint

https://api.yelp.com/v3/businesses/search/phone

Parameters or Sample Request

Response

Extra information

Could you please take a look at this issue and let me know how I can fix this?

bizmate commented 12 months ago

It looks like you know what to do but you dont want to? You wrote Your server seems to be using the newest TLS 1.3 protocol which is not supported by my server You should have posted it on StackOverflow because this is not a bug on Yelp but you are using an outdated setup. https://www.appviewx.com/blogs/why-is-tls-1-3-better-and-safer-than-tls-1-2/#:~:text=While%20TLS%201.2%20can%20still,vulnerabilities%2C%20and%20also%20improves%20performance.

Just to add, it looks like that your OS will be out of support after October 2023. It is objectively time to update

Sp23-23 commented 12 months ago

Hi Diego,

Thank you for your reply.

Is it possible to add supporting TLS 1.2 in addition to the TLS 1.3 on your side?

Thank you very much for your time and consideration.

Best regards, Alex Crystal

On Sun, Sep 24, 2023 at 1:24 PM Diego Gullo @.***> wrote:

It looks like you know what to do but you dont want to? You wrote Your server seems to be using the newest TLS 1.3 protocol which is not supported by my server You should have posted it on StackOverflow because this is not a bug on Yelp but you are using an outdated setup.

https://www.appviewx.com/blogs/why-is-tls-1-3-better-and-safer-than-tls-1-2/#:~:text=While%20TLS%201.2%20can%20still,vulnerabilities%2C%20and%20also%20improves%20performance .

— Reply to this email directly, view it on GitHub https://github.com/Yelp/yelp-fusion/issues/693#issuecomment-1732661353, or unsubscribe https://github.com/notifications/unsubscribe-auth/BCY3YNVX3LX7HQDCDEVUW63X4CJGFANCNFSM6AAAAAA5EK7LTQ . You are receiving this because you authored the thread.Message ID: @.***>

bizmate commented 12 months ago

hi Alex, I am not from Yelp. And no it is an outdated technology. You need to fix your server as it is too out of date and insecure

rockdog commented 5 months ago

Hi @Sp23-23, we have deprecated using TLS 1.2 and hence won't add support for it back again.