Final reminder: End-of-Life for Heroku Private Spaces TLS v1.0/v1.1 support scheduled for April 28, 2023
Change effective on 04 April 2023
In the fall of 2021, we published a changelog article titled “End-of-Life for Heroku Private Spaces TLS v1.0/v1.1 support scheduled for September 30th, 2022” to lay out the one year EOL window of TLS v1.0/v1.1 support for Heroku Private Spaces.
We have extended that EOL timeline into 2023, and will now remove support for older TLS versions on April 28, 2023. After April 28, 2023, Heroku will upgrade all apps on the platform to TLS 1.2+, and network communications to Private Space Apps using TLS 1.0/1.1 will fail.
In 2021, we changed the default ciphers used on all new Heroku apps deployed in Private Spaces to support only TLS v1.2+. On July 31, 2021, we completed the EOL for TLS v1.0/v1.1 support on the common runtime, and we are now following the same process for Private Spaces to comply with Salesforce TLS guidelines as well as the broader internet security best practices.
All Private Spaces customers currently using the legacy cipher suites spaces-tls-legacy and spaces-strict-tls used for backwards compatibility should have received an email with the subject: “REMINDER: End of Life for TLS 1.0/1.1 Support for Heroku Private Spaces” with more details and instructions about the EOL process. Also reference the TLS v1.0/v1.1 End Of Life Schedule for more details on the anticipated changes, expected timetable, and instructions on how to upgrade your apps in a Private Space to the most up-to-date security and infrastructure.