On July 15, 2024, Bitbucket began to update its Transport Layer Security (TLS) configuration to be consistent with other Atlassian Cloud products. This includes ending support for some weaker cipher suites.

This change is not being made in response to any breach or issue, but as part of our continuous efforts to ensure our products maintain our best-in-class security for our customers.

This change affects all HTTPS traffic to Bitbucket, including:

  • https://bitbucket.org
  • https://api.bitbucket.org
  • Repository operations against https://bitbucket.org
  • Hosted sites on https://*.bitbucket.io

This change does not affect:

  • Repository operations via SSH (bitbucket.org or altssh.bitbucket.org)

Supported cipher suites as of July 15, 2024As of July 15, 2024, your browser, client, or CI server must support making TLS connections using at least one of the cipher suites below.

  • TLS_AES_128_GCM_SHA256
  • TLS_AES_256_GCM_SHA384
  • TLS_CHACHA20_POLY1305_SHA256
  • TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
  • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
  • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

What cipher suites are deprecated?As of July 15, 2024, the following cipher suites are no longer supported.

  • TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
  • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

How can I tell if I am affected by this change?We will be contacting some teams and users directly, based on what we find in our logs. If you’d like to be proactive, though, then be sure to check all of the things that you use to connect to Bitbucket, including (but not limited to) your browser, your Git client, your CI/CD system, any API clients, and anything else you may have linked to Bitbucket.

I’ve found an affected library or client, or you’ve contacted me to tell me that I will be affected by this change. What do I need to do?Immediately upgrade anything that is affected to one of the supported cipher suites listed above. We understand that system upgrades can be complicated, especially on shared systems, but keeping your repositories secure is a priority for us. We appreciate your support and patience as we disable old, insecure cipher suites.

Additional resources* Supported security protocols for Atlassian cloud products

The post Update: Supported cipher suites for Bitbucket Cloud appeared first on Bitbucket.

See All 82 Episodes of "Bitbucket"