问题
On our Windows 2012 Server R2, we need to disabled TLS 1.0.
However we have .NET 4.5 Wcf services running. We found that if we disable TLS 1.0 that the WCF services no longer run, as we get the error 'An existing connection was forcibly closed by the remote host'.
Is TLS 1.1/1.2 enabled by default in .NET 4.5 and .NET 4.5.1 ? If not, which we assume is the case, where in our WCF project do we force the project to use TLS 1.1/1.2 ?
回答1:
No. The default protocols enabled for the various framework versions are:
- .NET Framework 4.5 and 4.5.1: SSLv3 and TLSv1
- .NET Framework 4.5.2: SSLv3, TLSv1, and TLSv1.1
- .NET Framework 4.6 and higher: TLSv1, TLSv1.1, and TLS1.2
Sources: [1] [2]
You can specify which protocols your application supports by using the ServicePointManager class, specifically by setting the SecurityProtocol property, which in your case you would want to set to the following:
System.Net.ServicePointManager.SecurityProtocol =
SecurityProtocolType.Tls11 | SecurityProtocolType.Tls12;
来源：https://stackoverflow.com/questions/34920429/is-tls-1-1-and-tls-1-2-enabled-by-default-for-net-4-5-and-net-4-5-1