By

Makalanyň katalogy
  1. 1. Birinji çözgüt:
  2. 2. Çözgüt 2
    1. 2.1. patch täzelen
    2. 2.2. Bellenen bahany düzüň
    3. 2.3. Barlag ulgamy
  3. 3. Üçünji çözgüt
  4. 4. Beýleki salgylanma mazmuny

Düşündiriş: Talap ýatyryldy: SSL / TLS ygtybarly kanal döredip bilmedi. SSL / TLS ygtybarly kanal döredip bilmedi.

Platformalary gurmak: Windows Server 2012, Windows 7 Service Pack 1 (SP1) we Windows Server 2008 R2 SP1

Birinji çözgüt:

HttpWebRequest-den öň kod düzüň

ServicePointManager.Expect100Continue = true;

ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12 | SecurityProtocolType.Tls11 | SecurityProtocolType.Tls;

ServicePointManager.ServerCertificateValidationCallback = (sender, certificate, chain, errors) => true;

Çözgüt 2

  • Aboveokardaky usul işlemese, ulgam derejesindäki mesele. Häzirki wagtda ulanýan ulgamyňyza görä ulgam patchyny täzeläň.

Windows-da WinHTTP-de esasy howpsuzlyk protokollary hökmünde TLS 1.1 we TLS 1.2-i işletmek üçin täzelenme, bu täzelenme Windows Server 2012-de Transport Layer Security (TLS), Windows 7 Service Pack 1 (SP1) we Windows Server 2008 R2 SP1 1.1 we TLS 1.2 goldawy, resmi resminamalara serediňhttps://support.microsoft.com/en-us/help/3140245/update-to-enable-tls-1-1-and-tls-1-2-as-default-secure-protocols-in-wi

patch täzelen

Bellenen bahany düzüň

  • “SChannel” komponent derejesinde Windows 7-de TLS 1.1 we 1.2-i işlediň (aşakdaky 2.1 ýa-da 2.2 täzelenmeleriň birini kabul ediň)

2.1 Microsoft registrini gurýar we täzeleýär:http://download.microsoft.com/download/0/6/5/0658B1A7-6D2E-474F-BC2C-D69E5B9E9A68/MicrosoftEasyFix51044.msi

2.2. Hasaba alyş kitabyny el bilen täzeläň, aşakdaky registr koduny göçüriň we reýestre import ediň. Täze txt dörediň, txt goşulmasyny reg (registr açary) üýtgediň we import ediň (import etmezden ozal ätiýaçlyk ediň)

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000800

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000800

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001

Barlag ulgamy

  • Ulgamyň TLS1.2, TLS1.3 goldaýandygyny ýa-da ýokdugyny barlaň

PowerShell açylýar:

Net.ServicePointManager::SecurityProtocol = [Net.SecurityProtocolType]::Ssl3 -bor [Net.SecurityProtocolType]::Tls -bor [Net.SecurityProtocolType]::Tls11 -bor [Net.SecurityProtocolType]::Tls12

Üçünji çözgüt

  • Öňki iki usulyň hiç biri-de işlemez. Ulgamy Windows 10-a täzelemek üçin diňe iň soňky usuly ulanyp bilersiňiz.

Beýleki salgylanma mazmuny

https://blogs.perficient.com/2016/04/28/tsl-1-2-and-net-support/

Çözgütler bar, ýöne çarçuwanyň wersiýasyna bagly:

.NET 4.6 we ondan ýokary. TLS 1.2-ni goldamak üçin goşmaça iş etmegiň zerurlygy ýok, adaty ýagdaýda goldanýar.

.NET 4.5. TLS 1.2 goldaýar, ýöne bu protokol däl. Ulanmagy saýlamaly. Aşakdaky kod TLS 1.2-i deslapky görnüşde düzýär, ygtybarly çeşmä birikmezden ozal ýerine ýetiriň:
ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12

.NET 4.0. TLS 1.2 goldanylmaýar, ýöne ulgamyňyzda .NET 4.5 (ýa-da has ýokary) gurnalan bolsa, programma çarçuwasy TLS 1.2-ni goldamaýan hem bolsa, TLS 1.2 ulanyp bilersiňiz. Onlyeke-täk mesele .NET 4.0-daky SecurityProtocolType-iň TLS1.2 üçin ýazgysy ýok, şonuň üçin bu san bahasynyň san görnüşini ulanmalydyrys:
ServicePointManager.SecurityProtocol = （SecurityProtocolType） 3072;

.NET 3.5 ýa-da ondan pes TLS 1.2 (*) goldanylmaýar we iş ýok. Arzaňyzy çarçuwanyň iň soňky wersiýasyna täzeläň.

PS 3-nji ssenariýa üçin, 4.5-i TLS 1.2-i programma taýdan mejbur etmezden ulanmaga mejbur etjek registr hakeri hem bar.
PPS Microsoft-yň Hristian Pop aşakda belläp geçişi ýaly, TLS1.2 goldawyny üpjün edýän .NET 3.5 üçin iň täze patch bar.
Serediň:
KB3154518 - HR-1605 - NDP 2.0 SP2 - Win7 SP1 / Win 2008 R2 SP1
KB3154519 - Ygtybarly Rollup HR-1605 - NDP 2.0 SP2 - Win8 RTM / Win 2012 RTM
KB3154520 - Ygtybarly Rollup HR-1605 - NDP 2.0 SP2 - Win8.1RTM / Win 2012 R2 RTM
KB3156421 -1605 HotFix Rollup through Windows Update for Windows 10.

Makalanyň katalogy
  1. 1. Birinji çözgüt:
  2. 2. Çözgüt 2
    1. 2.1. patch täzelen
    2. 2.2. Bellenen bahany düzüň
    3. 2.3. Barlag ulgamy
  3. 3. Üçünji çözgüt
  4. 4. Beýleki salgylanma mazmuny