TLS1.1 obsolete in .NET70+

robinrodricks · Dec 25, 2024 · efb0665 · efb0665
1 parent 22b3e63
commit efb0665
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/FluentFTP/Model/FtpConfig.cs b/FluentFTP/Model/FtpConfig.cs
@@ -256,7 +256,11 @@ public bool SocketKeepAlive {
 		/// Encryption protocols to use. Only valid if EncryptionMode property is not equal to <see cref="FtpEncryptionMode.None"/>.
 		/// Default value is .NET Framework defaults from the <see cref="System.Net.Security.SslStream"/> class.
 		/// </summary>
+#if NET7_0_OR_GREATER
+		public SslProtocols SslProtocols { get; set; } = SslProtocols.Tls12;
+#else
 		public SslProtocols SslProtocols { get; set; } = SslProtocols.Tls12 | SslProtocols.Tls11 | SslProtocols.Tls;
+#endif
 
 		/// <summary>
 		/// Gets or sets the max number of socket write/read transactions

diff --git a/FluentFTP/Model/Functions/FtpAutoDetectConfig.cs b/FluentFTP/Model/Functions/FtpAutoDetectConfig.cs
@@ -34,11 +34,19 @@ public class FtpAutoDetectConfig {
 		/// <summary>
 		/// List of protocols to be tried, and the order they should be tried in.
 		/// </summary>
+#if NET7_0_OR_GREATER
+		public List<SysSslProtocols> ProtocolPriority { get; set; } = new List<SysSslProtocols> {
+			SysSslProtocols.Tls12,
+			// Do not EVER use "Default". It boils down to "SSL or TLS1.0" or worse.
+			// Do not use "None" - it can connect to TLS13, but Session Resume won't work, so a successful AutoDetect will be a false truth.
+		};
+#else
 		public List<SysSslProtocols> ProtocolPriority { get; set; } = new List<SysSslProtocols> {
 			SysSslProtocols.Tls11 | SysSslProtocols.Tls12,
 			// Do not EVER use "Default". It boils down to "SSL or TLS1.0" or worse.
 			// Do not use "None" - it can connect to TLS13, but Session Resume won't work, so a successful AutoDetect will be a false truth.
 		};
+#endif
 
 	}
 }