Deprecations

Deprecated Libraries

From DSG 4.1.0, the following Python libraries are excluded from the default DSG installation. If required, you can install these libraries manually using the /opt/protegrity/alliance/bin/scripts/install_optional_libs.sh script. These libraries will be removed in a future release, and pyarrow is the recommended alternative. For more information, refer to KB Article.

The following libraries are deprecated:

• parquet
• ply
• thriftpy2

Deprecated Cryptographic Modules

From DSG 4.1.0, py_secure_data replaces py_pcc_crypto (Hades) as the encryption library. The py_pcc_crypto library is retained only to support upgrades and configuration imports from DSG 3.1.0.x to 4.0.0. Support for py_pcc_crypto will be removed in a future release.

The following module is deprecated:

• py_pcc_crypto (Hades)

Deprecated Security Protocols

Removed Security Protocols

From DSG 4.0.0, TLS 1.0 and TLS 1.1 are no longer supported for inbound or outbound connections. Before upgrading to DSG 4.0.0 or later, ensure that all clients connecting to DSG and all backend servers connected to DSG support TLS 1.2 or higher.

The following protocol versions are no longer supported:

• TLS 1.0
• TLS 1.1

Deprecated Certificate Signing Algorithms

From DSG 4.1.0, the DSG Web UI displays a non-blocking warning when a certificate uses a deprecated signing hash algorithm or a weak public key. Public keys smaller than 4096 bits are considered weak, and keys smaller than 2048 bits are deprecated. Support for deprecated algorithms and key lengths will be removed in a future release.

The following signing hash algorithms are deprecated:

• MD2
• MD4
• MD5
• SHA-1
• RIPEMD
• MDC2

Deprecated Payloads

The following payloads are deprecated and will be removed in a future release of DSG.

• Enhanced Adobe Portable Document Format (PDF) Codec
• Adobe Portable Document Format (PDF) Codec
• AMF Codec