I had fits and starts connecting to servers that had the TLS hardening put on them for web requests.
And a simple setting allowed you to connect to tls1.2 configured web servers.
However, since I was writing a script that could talk to any mode TLS server Like a normal web browser, I experiment with my limited understanding of .NET request and came up with a short but sweet way to set it.
The I painfully discovered that if you set this more than 2 times, then webrequests would break.
So I added a check to see if it was set, so if this gets in a loop the access doesn't break.
http://www.hass.de/content/setup-your-iis-ssl-perfect-forward-secrecy-and-tls-12
By Alexander Hass
at your own risk.
I modified his script to not disable any the TLS modes so This could be applied without risk to servers to fix access problems without creating a new problem for apps / scripts that can't ope with TLS ver 1&2
(Which is not to say some other archaic system might have a sezure with changing the criypto settings.
And a simple setting allowed you to connect to tls1.2 configured web servers.
However, since I was writing a script that could talk to any mode TLS server Like a normal web browser, I experiment with my limited understanding of .NET request and came up with a short but sweet way to set it.
The I painfully discovered that if you set this more than 2 times, then webrequests would break.
So I added a check to see if it was set, so if this gets in a loop the access doesn't break.
#enable TLS* if ([Net.ServicePointManager]::SecurityProtocol -ne ([Net.SecurityProtocolType].GetEnumNames() | ? { $_ -like "Tls*" })) { [Net.ServicePointManager]::SecurityProtocol = ([Net.SecurityProtocolType].GetEnumNames() | ? { $_ -like "Tls*" }) }br /> You can set a servers TLS and Crypto setting with:
http://www.hass.de/content/setup-your-iis-ssl-perfect-forward-secrecy-and-tls-12
By Alexander Hass
at your own risk.
I modified his script to not disable any the TLS modes so This could be applied without risk to servers to fix access problems without creating a new problem for apps / scripts that can't ope with TLS ver 1&2
(Which is not to say some other archaic system might have a sezure with changing the criypto settings.
No comments:
Post a Comment