Disabled SSL3 and Enabled TLS1.2 in callback service. (#403)

agr · web-flow · commit c182bacd246d · 2018-04-11T17:08:24.000-07:00
* Disabled SSL3 and Enabled TLS1.2 in callback service.
diff --git a/src/Validation.Common/Validators/Vcs/VcsCallbackServer.cs b/src/Validation.Common/Validators/Vcs/VcsCallbackServer.cs
@@ -74,6 +74,10 @@ public VcsCallbackServerStartup()
 
         public void Configuration(IAppBuilder app)
         {
+            // Ensure that SSLv3 is disabled and that Tls v1.2 is enabled.
+            ServicePointManager.SecurityProtocol &= ~SecurityProtocolType.Ssl3;
+            ServicePointManager.SecurityProtocol |= SecurityProtocolType.Tls12;
+
             if (Services.Logging.ApplicationInsights.Initialized)
             {
                 app.Use<RequestTrackingMiddleware>();

Original file line number	Diff line number	Diff line change
`@@ -74,6 +74,10 @@ public VcsCallbackServerStartup()`
`74`	`74`
`75`	`75`	`public void Configuration(IAppBuilder app)`
`76`	`76`	`{`
	`77`	`+ // Ensure that SSLv3 is disabled and that Tls v1.2 is enabled.`
	`78`	`+ ServicePointManager.SecurityProtocol &= ~SecurityProtocolType.Ssl3;`
	`79`	`+ ServicePointManager.SecurityProtocol \|= SecurityProtocolType.Tls12;`
	`80`	`+`
`77`	`81`	`if (Services.Logging.ApplicationInsights.Initialized)`
`78`	`82`	`{`
`79`	`83`	`app.Use<RequestTrackingMiddleware>();`