NuGet is deprecating the legacy cipher suites

NuGet used to support both the modern cipher suites and the legacy cipher suites for the connection to the main site, http://www.nuget.org.

However, on August 30th, it has become clear that NuGet is deprecating the legacy cipher suites from their site so anyone who are still using the legacy cipher suites are no longer be able to access NuGet until they use the latest cipher suites. The users who are using the below cipher suites can access NuGet and its packages:

• TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
• TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
• TLS_RSA_WITH_AES_256_GCM_SHA384

However, they also stated that between August 31th and September 2nd, they’ll take a test for the deprecation to “understand the broken change for our customers.”

Based on Microsoft’s telemetry, they expected that the impact for the customers would be minimal.

Today marks the deprecation date for the legacy cipher suite, whifh means that people that are using legacy cipher suites and are still using NuGet will no longer be able to use the services until they update their clients to support the abovementioned cipher suites.

Enjoy!