In company that I work, we have a product that uses WCF over net.tcp using SSL in .NET Framework 4.0. In a specific client, for security reasons, exists the requirement to disable the SSL 2, SSL 3 and TLS 1. The problem is that the comunnication doesn’t work without TLS 1.0.The problem is that the comunnication doesn’t work without TLS 1.0.
Someone can tell me Why?
I used the IISCrypto to disable the above protocols. It's attached in this discussion the example code. Steps to reproduce the scenario.Steps to reproduce the scenario.
Disable the protocols as show in the image below
Restart the Computer
Build the solution : dl.dropboxusercontent.com/u/51027563/WCFWithSecurity.zip
Execute the Server.exe
Execute the Client.exe
- It’ll show the error below : The caller was not authenticated by the service
Julian CorreaPosted Sep 16, 2015, 9:49 AM
guys.
After many attempts, the only way to make the WCF run without TLS 1.0, was enabling FIPS.
Follow the link http://stackoverflow.com/a/13635742/1234031 to enable FIPS.
lakshmi priyaakaPosted Jul 3, 2015, 6:09 AM
As per this case, I suggest you to refer the following links which may guide you to resolve this case :
to refer about How to disable PCT 1.0, SSL 2.0, SSL 3.0, or TLS 1.0 in Internet Information Services.
to refer this article explains about which cipher suites are associated with which protocols.
to refer about TLS1.0.