The IRS is issuing new public SSL certificates for establishing the SSL connection and revoking the current certificates as an additional precaution to the recent Heartbleed bug. A new set of certificates are being issued on the dates identified below for A2A transmitters accessing the Production and ATS environment. IFA transmitters should not be affected by this change.
Your software configurations may be set up to automatically download these certificates when it connects to MeF for the first time. IRS recommends testing your software in the ATS environment to confirm if they need to be manually installed. The certificates are available on the MeF User Guides & Publications page so they can be manually downloaded.
The new SSL certificates are not being implemented by MeF until April 27th for "la alt" and May 4th for "la main" but transmitters are encouraged to add them as soon as they become available. Please do not remove the current certificates until they are no longer supported by MeF.
Highlight Information:
April 23rd, 2014 - MeF will post new ATS (“la alt”) certificates on the MeF User Guides & Publications page.
April 27th, 2014 - MeF will no longer support the existing ATS certificates
April 28th, 2014 - MeF will post new Production (“la main”) certifications on the MeF User Guides & Publications page
May 4th, 2014 - MeF will no longer support the existing Production certificates
If you have any questions please email the MeF Mailbox.
Note: The certificates are in a ZIP folder with the file extension *.txt. If you need to convert them to another file type (*.cer, *.crt, *.pem, etc) in order to upload them to your server you can rename the certificates to the necessary file type.
|