Dear developer,
To fortify the security and reliability of your app, HUAWEI IAP has updated the URLs and raised the requirements on TLS versions and cypher suites.
For security purposes, from April 2023, HUAWEI IAP will no longer support any TLS version earlier than 1.2 or any cipher suite not listed in the table below. Apps that use any of these TLS versions or cipher suites will be disconnected from HUAWEI IAP.
TLS Version | Cipher Suite (IANA Name) | Remarks |
TLS 1.3 | TLS_AES_128_GCM_SHA256 TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 | Currently, the Russia site still uses TLS 1.2. TLS 1.3 support is planned for the future. |
TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 |
The table above does not list every TLS version and cipher suite in use, but you must ensure your app is using the supported TLS version and cipher suite when your app has changed over to the new URL.
The table below lists the site URL changes of HUAWEI IAP.
Service | Site | New URL | Old URL |
Order (the service for purchasing a one-time product) | China | https://orders-drcn.iap.cloud.huawei.com.cn | https://orders-drcn.iap.hicloud.com |
Germany | https://orders-dre.iap.cloud.huawei.eu | https://orders-dre.iap.hicloud.com | |
Singapore | https://orders-dra.iap.cloud.huawei.asia | https://orders-dra.iap.hicloud.com | |
Russia | https://orders-drru.iap.cloud.huawei.ru | https://orders-drru.iap.hicloud.com | |
AppTouch | https://orders-at-dre.iap.cloud.huawei.eu | https://orders-at-dre.iap.dbankcloud.com | |
Subscription (the service for purchasing a subscription) | China | https://subscr-drcn.iap.cloud.huawei.com.cn | https://subscr-drcn.iap.hicloud.com |
Germany | https://subscr-dre.iap.cloud.huawei.eu | https://subscr-dre.iap.hicloud.com | |
Singapore | https://subscr-dra.iap.cloud.huawei.asia | https://subscr-dra.iap.hicloud.com | |
Russia | https://subscr-drru.iap.cloud.huawei.ru | https://subscr-drru.iap.hicloud.com | |
AppTouch | https://subscr-at-dre.iap.cloud.huawei.eu | https://subscr-at-dre.iap.dbankcloud.com |
Old URLs will be gradually removed and you are recommended to change your app to the new URL before April 2023. If you have already changed the URL for your app, you can start configuring the TLS version and cipher suite according to the preceding table.
It is important that you perform all necessary tests before you change the site URL to prevent IAP connection issues caused by incompatible HTTP client configurations.
If you have any questions, please submit a ticket online. Thank you for your understanding and we apologize for any inconvenience caused.
Note:
A cipher suite may have different names in different dependent libraries (such as OpenSSL and GnuTLS). Click to see an example.
HUAWEI IAP
Aug 2, 2022