简体繁体 English

通过tls 1.2的HttpListener通信

[英]HttpListener communication via tls 1.2

原文 2014-12-11 14:20:48 9 1 .net/ ssl/ httplistener

I am using HttpListener ( http://msdn.microsoft.com/en-us/library/system.net.httplistener%28v=vs.110%29.aspx ) for standalone HTTP communication. 我正在使用HttpListener（ http://msdn.microsoft.com/en-us/library/system.net.httplistener%28v=vs.110%29.aspx ）进行独立的HTTP通信。 Application developed with .NET v4.0. 用.NET v4.0开发的应用程序。 Is it possible to use TLS v1.2 in my application for communication with HttpListener? 是否可以在我的应用程序中使用TLS v1.2与HttpListener通信？

1 个解决方案

In short - yes, you can. 简而言之-是的，您可以。 In long - it is a little bit more complex :-) 长期来说-这有点复杂:-)

As far as I know security is controlled by the http.sys driver, which is used from the HttpListener. 据我所知，安全性是由HttpListener中使用的http.sys驱动程序控制的。

You could configure what should be the SSL/TLS version used for ALL the applications on one and the same machine that are using those functionality. 您可以配置一台和使用这些功能的同一台计算机上的所有应用程序所使用的SSL / TLS版本。 But I think this is impossible in programmatic way and only for you application. 但是我认为这不可能以编程方式实现，而仅对您而言适用。 You can always use third party libraries of course, like OpenSSL. 当然，您始终可以使用第三方库，例如OpenSSL。

Otherwise to configure you machine security layers you could refer some of those: http://www.adminhorror.com/2011/10/enable-tls-11-and-tls-12-on-windows_1853.html 否则，为配置计算机安全层，您可以参考其中的一些层： http : //www.adminhorror.com/2011/10/enable-tls-11-and-tls-12-on-windows_1853.html

And test afterwards with OpenSSL client as described here: https://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566 然后按如下所述使用OpenSSL客户端进行测试： https : //askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566

I supposed you are using MS .NET on Windows OS. 我以为您在Windows OS上使用MS .NET。 It is not quite the same with Mono. 与Mono不太一样。