WebCrossing Server Security Upgrade

Posted on Mar 26, 2019 in Uncategorized | No Comments

We always try to stay on top of security! This new version includes the latest SSL security upgrades, and ensures we maintain our “A” rating from testing sites, such as SSL Labs.

Specifically, the new upgrade deals with these previously known issues: Timing vulnerability in DSA signature generation; Timing vulnerability in ECDSA signature generation; Fixed a bug in DTLS over SCTP which broke interoperability with older versions of OpenSSL like OpenSSL 1.1.0 and OpenSSL 1.0.2; Changed the info callback signals for the start and end of a post-handshake message exchange in TLSv1.3; 

If you are interested in using SSL encryption for the security of your site we recommend this upgrade.

The latest release version is now WebCrossing 6.4-1349 2019-03-19.

All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.

If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

WebCrossing Server Maintenance Upgrade

Posted on Mar 1, 2019 in Uncategorized | No Comments

The purpose of this update is to make it easier for large sites to do a database repack offline without worrying about a live server’s daily backup interfering in the meanwhile. The new feature is a “suspend backups for 10 days” option to ensure the roll-forward file keeps on growing until the repack is done.

This is rather technical. Please bear with me as I explain!

Regular maintenance of large databases is highly recommended. One maintenance activity is “repacking” – a procedure which can substantially reduce the size of a database by reclaiming space no longer in use. While a certain amount of database re-use occurs automatically, repacking actually helps reducethe total size of the database. 

Repacking can be done offline on a separate server, to avoid impacting on the live server process. During repacking it is best to suspend daily backups. When repacking is completed, you can then update your server with the repacked database and it will include transactions which occurred during the repack by reading in the roll-forward filing containing those transactions. So it’s important to ensure that your roll-forward transactions continue to get recording normally until the last step. 

If you have no idea what I’m talking about, but are interested in doing a repack of your large database then please contact support and we will help you if you have an up-to-date maintenance agreement or are hosted in one of our data centers.

The latest release version is now WebCrossing 6.4-1348 2019-02-18.

All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.

If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

WebCrossing Server New Major Security Upgrade for TLS 1.3

Posted on Nov 8, 2018 in Uncategorized | No Comments

We have a new major upgrade of our encrypted security for sites using SSL certificates. Transport Layer Security (TLS) version 1.3 has been approved by the Internet Engineering Task Force (IETF), making it the new industry standard for secure connections. We are keeping up with the latest security standards (safety is number one!) and now the latest WebCrossing Server release supports TLS 1.3.

With the newest version set to become the standard model for securing internet connections, users can expect connections to complete faster due to less clutter in computer-to-computer communication. That same speed increase will also make TLS more secure because much of what was eliminated was old, obsolete encryption.

The security and speed improvements that TLS 1.3 brings are dependent on each other: It’s secure because it’s faster, and it’s faster because of security improvements.

The latest release version is now WebCrossing 6.4-1347 2018-10-31

If you are running a self-hosted site we strongly recommend upgrading your WebCrossing server to this new build. If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

WebCrossing Server Stability Upgrade for Large and Busy Sites

Posted on Sep 11, 2018 in Uncategorized | No Comments

This upgrade is mainly for very large and busy sites. We have optimized the way connections are checked and cleared to ensure the smallest interruption possible in the rare event sockets become cluttered. With other recent optimizations, this reduces potential restart times, in those rare cases, from a few minutes to a few seconds.

We also added a minor bug fix for Neighbors sites in the way automatic redirection is handled by the WebCrossing server to member personal home pages. That’s where users have profiles, blogs, files, and other resources.

Also, we want to remind you of our most recent, major upgrade of our encrypted security for sites using SSL certificates. This includes (1) a thorough and complete upgrade of server-side supported protocols, through TLSv1.2; (2) an upgrade of certificate and CSR generation features, upgrading from MD5 to SHA256, (3) and all the cipher suites have been upgraded to support connectivity from the latest secure browsers.

That upgrade includes not just server-side protocol upgrades. Your WebCrossing server is also capable of acting like a client and making API calls to other servers. Those servers also are requiring higher protocol TLS 1.2 connections these days. With this major upgrade, now your WebCrossing server can make those calls.

The latest release version is now WebCrossing 6.4-1346 2018-09-05.

If you are running a self-hosted site we strongly recommend upgrading your WebCrossing server to this new build. If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

WebCrossing Server – Not Secure? We can help!

Posted on Aug 21, 2018 in Uncategorized | No Comments

We received the following email from a customer this week –

“We need our Online Community site to be secure, we have gotten concerns from our members because when they login though their browsers they see Not Secure.”

How timely! We sent out a newsletter recently about exactly this issue. Security levels are being increased all over the Internet. Browsers, such as Chrome, have been upgraded and are more picky about where they connect. And of course we all need to be more and more careful about how data is handled.

If you are not careful with security at your site, browsers will eventually refuse to connect, or they will give your users scary warnings, like the new one above. Also, starting last month, TLSv1.0 is no longer accepted by financial institutions, so users with old browsers will need to update. Sites only supporting TLSv1.0 are now considered non-secure.

We recently made a special effort and accomplished a major upgrade of our encrypted security for sites using SSL certificates. This includes (1) a thorough and complete upgrade of server-side supported protocols, through TLSv1.2; (2) an upgrade of certificate and CSR generation features, upgrading from MD5 to SHA256, (3) and all the cipher suites have been upgraded to support connectivity from the latest secure browsers.

And it’s not just server-side protocol upgrades. Your WebCrossing server is also capable of acting like a client and making API calls to other servers. Those servers also are requiring higher protocol TLS 1.2 connections these days. With this major upgrade, now your WebCrossing server can make those calls.

We can help you upgrade your site if you are a hosted customer or have a self-hosted site with a current support contract. We can help you get the “CSR” needed to obtain an SSL certificate and help you install it. You can even purchase SSL certificates (and domains too) from us at ellipticsdomains.comAlso note that certain certificate sources, such as Symantec, will no longer be trusted as of September. Please be sure your SSL certificates are issued from a trusted source. SSL certificates purchased from us remain trusted certificates.

All self-hosted customers with valid support and maintenance contracts can download the latest new version at no cost.If you are running a self-hosted site we strongly recommend upgrading your WebCrossing server to the latest new build. If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.