# Cloud instances unable to communicate with listening and polling tentacles

- Provider: [Octopus Deploy](https://down.guide/octopus)
- Level: confirmed
- Impact: Partial outage
- lasted 5d 1h
- started 2023-12-08 01:23 UTC
- Octopus Cloud
- id: DWN-2ca693dcdd
- Official page: https://stspg.io/cplfp7r21dh8

## Updates from Octopus Deploy
### 2023-12-08 01:23 UTC: investigating
Since the morning of Friday 8th December, cloud customers are reporting issues with communicating to listening and polling tentacles. We are investigating this as a priority incident and will work on a resolution as soon as possible.

### 2023-12-08 03:41 UTC: investigating
We have identified a suspected root cause and workaround. 
We suspect this is limited to certificates using a SHA1 algorithm but are investigating further.
If affected please try the workaround detailed in this issue: https://github.com/OctopusDeploy/Issues/issues/8523

### 2023-12-08 06:06 UTC: identified
The underlying cause has been identified. The issue is currently isolated to cloud customers. A fix is actively being work on.

### 2023-12-08 10:21 UTC: monitoring
A fix has been created and is being rolled out to affected customers.
This issue affects instances of Tentacle that use SHA1 (an old, unsupported, encryption algorithm), and prevents them from connecting to Octopus Cloud. This was a side effect of the Octopus Server .NET 8 upgrade, and the resulting change to the underlying OS from Debian 11/OpenSSL 1.x to Debian 12/OpenSSL 3.x. 
If you continue to be affected by this issue, please try the workaround detailed at https://github.com/OctopusDeploy/Issues/issues/8523, or contact support at https://octopus.com/support.

### 2023-12-11 01:31 UTC: monitoring
We have identified customers that were most likely affected. and prioritized applying the fix to these customers on the 9th and 10th of December. Rollout continues to all remaining customers, and we anticipate this to be complete by the 12th of December.

### 2023-12-13 02:45 UTC: resolved
All Octopus Cloud customers have been upgraded to fixed software versions, resolving this incident.
Self-hosted customers were not affected.

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by Sazabi (https://sazabi.com/?utm_source=down-guide&utm_medium=markdown).