Je SumY.15084 (Customer) asked a question.
Token Inline Hook TLS version
Has anyone had any experience running token inline hooks using TLS v1.3? I seem to be running into an issue where Okta's calls to my REST API are failing if I set the minimum TLS version to 1.3 (in other words, my REST API only supports TLS v1.3 and above). It works the moment minimum TLS is 1.2.
In the logs I actually see this error when the call to the hook fails:
"Inline Hook execution failed
failure: Hook "Enrich ID Token" execution failed. error:1000042e:SSL routines:OPENSSL_internal:TLSV1_ALERT_PROTOCOL_VERSION"
Hello @Je SumY.15084 (Customer),
I noticed you have an open case on this issue. Were they able to help you with this?
Regards,
Natalia
Okta Inc.
Not yet, Natalia. Support did say "TLS 1.3 should be supported", but from my tests, it doesn't seem to be so. It's a little surprising, given Okta's role as a platform. I do hope they come back with an official position.
In the meantime, I downgraded my REST endpoint to TLS1.2.