-
Notifications
You must be signed in to change notification settings - Fork 54
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Adding TLS negotiation support for older versions of .NET #254
Conversation
c5b091e
to
17fd573
Compare
Pinged the wrong people! @schisamo can you help find someone to review this? |
@andy-dufour I'm testing this out on a couple of platforms and then should be in a position to approve! Stand by! |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Works on a stock Windows 7 and Windows 2008 R2 machine, pre WMF 4.0.
@@ -1,4 +1,5 @@ | |||
[Console]::OutputEncoding = New-Object -typename System.Text.ASCIIEncoding | |||
[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]'Ssl3,Tls,Tls11,Tls12' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I am not sure if older versions of Windows natively support TLS 1.2 or not... but if they do, it should be the only TLS version we use. At the very least we should disable SSLv3, and possibly TLS 1.0.
beebbfb
to
94ead38
Compare
Signed-off-by: Andrew Dufour <[email protected]>
Signed-off-by: Andrew Dufour <[email protected]>
94ead38
to
566cb86
Compare
This should allow older verisons of .NET that are on operating systems forced to negotiate TLS 1.2 to successfully download our software using mixlib-install.
Corrects #253