In company that I work we have a product that uses WCF over net.tcp using SSL in .NET Framework 4.0. In a specific client, for security reasons, exists the requirement to disable SSL 2, SSL 3 and TLS 1. The problem is that the communication doesn’t work without TLS 1.0. Can someone tell me Why? I used IISCrypto to disable the above protocols. It's attached in this discussion with the example code. Steps to reproduce the scenario.
Disable the protocols as show in the image below
Restart the Computer
Build the solution (check it out https://github.com/juliancorrea/WCFWithSecurity)
Execute the Server.exe
Execute the Client.exe
It’ll show the error below : The caller was not authenticated by the service
guys.
After many attempts, the only way to make the WCF run without TLS 1.0, was enabling FIPS.
Follow the link https://stackoverflow.com/a/13635742/1234031 to enable FIPS.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With