Cloud SSL Certificate Update for Engagement services in all regions except Oregon
Maintenance window: May 9, 2019 00:01 to 04:00 UTCImpacted Cloud services:
Cloud SSL certificate for Engagement services (*.messaging.konycloud.com) in all regions except Oregon, which expires on May 9, 2019 at 12:00 PM UTC. We will be rotating starting on May 9, between 00:01 and 04:00 UTC.
⚠️ Note: If you are not using Engagement services in a non-Oregon region and have not pinned the Engagement Kony certificate (*.messaging.konycloud.com) in your application, no application updates will be necessary. Customers that have pinned this SSL certificate will need to download the new certificate, rebuild their application(s), including both the old and new certificates, and publish the updated binaries to the various app stores. Your application(s) should be published before Kony updates the certificates on the Cloud servers or customers will no longer be able to connect. A new certificate can be found on the Kony Cloud Certificate Preview page. The new certificate can also be downloaded by executing the following command:
Engagement:
openssl s_client -showcerts -connect konycertificatepreview.messaging.konycloud.com:7443
Customers who have pinned the public key instead of the full certificate may not be required to update their applications as we would try to preserve the same public key for the new certificate(s) as the old certificate(s).
If necessary, you can submit your applications for expedited approval (e.g., Apple has an expedited approval process for critical bugs, or in this case, pinned certificates).
Impact Level : high
Customer applications that have pinned the SSL certificate will need to be updated as described above prior to this maintenance window. Customer applications that have not pinned this SSL certificate will not be affected and will experience no service disruptions during this maintenance window.
You can also refer to Kony Base Camp for more general information regarding how to enable SSL pinning in your apps.
Note that SSL certificates for other Kony Cloud services (e.g., Identity, Fabric, Sync) expire on November 21, 2019. You can verify by inspecting the certificates, which are available on the Certificate Preview site. We will send a reminder in advance of the next rotation for these certificates so you can prepare.