From 8251b2d2292a098d283303a0476183103b789256 Mon Sep 17 00:00:00 2001 From: Scott Bommarito Date: Thu, 3 Dec 2020 16:52:14 -0500 Subject: [PATCH] block tls 1.0 and 1.1 (#26) --- src/NuGet.Licenses/Global.asax.cs | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/NuGet.Licenses/Global.asax.cs b/src/NuGet.Licenses/Global.asax.cs index f79c51b..3201002 100644 --- a/src/NuGet.Licenses/Global.asax.cs +++ b/src/NuGet.Licenses/Global.asax.cs @@ -54,8 +54,10 @@ private static void SetupInstrumentation() private static void SetupSsl() { - // Ensure that SSLv3 is disabled and that Tls v1.2 is enabled. + // Ensure that SSLv3 is disabled and that TLS v1.2 is the minimum TLS version. ServicePointManager.SecurityProtocol &= ~SecurityProtocolType.Ssl3; + ServicePointManager.SecurityProtocol &= ~SecurityProtocolType.Tls; + ServicePointManager.SecurityProtocol &= ~SecurityProtocolType.Tls11; ServicePointManager.SecurityProtocol |= SecurityProtocolType.Tls12; }