Chris White created AMQNET-765:
----------------------------------
Summary: TLS 1.2 should be default connection protocol for openwire
Key: AMQNET-765
URL: https://issues.apache.org/jira/browse/AMQNET-765
Project: ActiveMQ .Net
Issue Type: Improvement
Components: NMS
Affects Versions: OpenWire-1.8.0
Reporter: Chris White
Hi,
I have had a recent issue with NMS Openwire where the default behaviour is to
default to initiating TLS 1.0 connections for SSL connections.
SslTransport.cs
{{{{ }}}}
{code:java}
private SslProtocols GetAllowedProtocol()
{
if (!String.IsNullOrEmpty(SslProtocol))
{
return (SslProtocols)Enum.Parse(typeof(SslProtocols), SslProtocol, true);
}
return SslProtocols.Default;
}
{code}
Surely, the default should be TLS 1.2 (or even TLS 1.3) givent the fact
Microsoft have announced deprecation of SSL/TLS 1.0/1.1 for security reasons?
[https://docs.microsoft.com/en-us/lifecycle/announcements/transport-layer-security-1x-disablement]
regards
Chris
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
