All geek questions in one place

What version of SSL / TLS does System.Web.Services.Protocols.SoapHttpClientProtocol use?

Now that SSL 3 is vulnerable to a POODLE attack:

What version of SSL / TLS does System.Web.Services.Protocols.SoapHttpClientProtocol use when connecting to any https Uri?

I use SoapHttpClientProtocol to connect to several third-party SOAP APIs. One of them now said that they will block any request that uses SSL 3. But SoapHttpClientProtocol is part of the .Net kernel framework (using 4.5), so it is not clear which version of SSL it uses or how to override the version.

Please note that this question is not a duplicate. Which versions of SSL / TLS support System.Net.WebRequest? . I use several APIs, some of them are REST (another question for them) and some of them are SOAP (this question is for them)

+5
source share
2 answers

Decompiling the SoapHttpClientProtocol class shows that it really uses System.Web.WebRequest under the hood.

Various methods for calling requests (Invoke, InvokeAsync, BeginInvoke) terminate the GetWebRequest call, which calls the base class WebClientProtocol.GetWebRequest, in which WebRequest is created.

It follows that the answer to What version of SSL / TLS is System.Net.WebRequest used? .

+3
source

The SSL version must be controlled by the static property System.Net.ServicePointManager.SecurityProtocol. My field is set to "SSLV3 | TLS". You can install TLS12.

+1
source

Source: https://habr.com/ru/post/1204882/

More articles:


All Articles