Classic ASP Outbound TLS 1.2

by

I found a solution with a simple registry fix.

1) Register TLS 1.2 Protocol:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]
"Enabled"=dword:ffffffff
"DisabledByDefault"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server]
"Enabled"=dword:ffffffff
"DisabledByDefault"=dword:00000000

2) Configure TLS 1.2 to be default in 32 bit applications:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000800

3) Configure TLS 1.2 to be default in 64 bit applications:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000800

4) Restart server

If you need support of TLS 1.1 only then:

  • On step 1) above simply change “TLS 1.2” to “TLS 1.1” and apply new registry fix
  • On steps 2) and 3) above change value “00000800” to “00000200” and apply new registry fix

If you need support of both TLS 1.1 and 1.2 then

  • Repeat step 1) from above two times two register both protocols
  • On steps 2) and 3) use value “00000A00” (what is combination of “00000800” + “00000200”)

Code for verification:

<%
Set objHttp = Server.CreateObject("WinHTTP.WinHTTPRequest.5.1")
objHttp.open "GET", "https://howsmyssl.com/a/check", False
objHttp.Send
Response.Write objHttp.responseText 
Set objHttp = Nothing 
%>

At the end of response you should see version of TLS used by request

"tls_version":"TLS 1.2"

More Related Contents:

  1. TLS 1.2 in .NET Framework 4.0
  2. SSL pages under ASP.NET MVC
  3. how can I share an asp.net session between http and https
  4. C# ASP.NET Send Email via TLS
  5. What is the best way to read/parse the XML files [closed]
  6. Accessing Session Using ASP.NET Web API
  7. SignalR – Sending a message to a specific user using (IUserIdProvider) *NEW 2.0.0*
  8. What is the App_Data folder used for in Visual Studio?
  9. CodeFile vs CodeBehind
  10. How to update a PDF without creating a new PDF?
  11. IIS 500.19 with 0x80070005 The requested page cannot be accessed because the related configuration data for the page is invalid error
  12. ASP.NET Identity DbContext confusion
  13. Adding ASP.NET MVC5 Identity Authentication to an existing project
  14. ASP.NET web.config: configSource vs. file attributes
  15. How serious is this new ASP.NET security vulnerability and how can I workaround it?
  16. How do I protect static files with ASP.NET form authentication on IIS 7.5?
  17. asp.net validation to make sure textbox has integer values
  18. ASP.Net Download file to client browser
  19. EditorTemplate for DropDownList
  20. Capturing SOAP requests to an ASP.NET ASMX web service
  21. How do you get the UserID of a User object in ASP.Net MVC?
  22. How to use the tag in ASP.NET?
  23. Databinding methods such as Eval(), XPath(), and Bind() can only be used in the context of a databound control
  24. How do modern implementations of Comet/Reverse AJAX work? Any stable C# WCF or ASP.NET implementations?
  25. Get DisplayName Attribute without using LabelFor Helper in asp.net MVC
  26. Can I get the browser time zone in ASP.NET or do I have to rely on JS operations to retrieve the information?
  27. How to return a view for HttpNotFound() in ASP.Net MVC 3?
  28. ViewModel’s list is null in action
  29. The remote host closed the connection. The error code is 0x800704CD
  30. Replicate VS2008 “Publish Web Site” from command line

Leave a Comment