Due to changes in security, it may be necessary to update or migrate a site to use TLS 1.2 for outbound connections. Most notably for a payment gateway. Please note this only affects outbound connections and is not related to a SSL certificate that may be installed for the site. For general information, including testing, find the applicable scripting section below (ASP.NET, Classic ASP, or PHP). If it's necessary to migrate the site to a newer version of Windows or you require assistance with reviewing TLS 1.2 support, please open a ticket with the Support Department
Windows Server Version
The version of Windows Server, necessary to check for ASP.NET and Classic ASP support, can be ascertained by reviewing the Server Name in the Winhost Control Panel, then matching it against the key below. The Web Server field in the Winhost Control Panel will show whether the site is on Windows Server 2008, 2012, or 2016, but the key below will specify whether it's on 2008 R2 or 2012 R2.
Winhost Control Panel > Sites > the domain name > Site info pane
The requirements for TLS 1.2 support when using ASP.NET are Windows Server 2012 R2 or 2016, ASP.NET Framework 4.5 or higher and bootstrapping code to set the TLS version.
If a site is hosted on an older version of Windows, for migration assistance to Windows 2012 R2 or Windows 2016, please open a ticket with Support.
If a site is using an ASP.NET Framework older than 4.5 it will need to be updated. Note this is a project update rather than the ASP.NET Framework version set in the Winhost Control Panel.
To set the TLS version for an outbound connection, add the following to the script making the connection or the global.asax:
System.Net.ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12
More information regarding the last update can be found after the link https://stackoverflow.com/q/28286086
. Also note that the bootstrapping code would have to be updated if TLS requirements were to change in the future.
TLS 1.2 support through Classic ASP the site should be on a Windows 2012 R2 or Windows 2016 server.
To test TLS 1.2, the script in zssl.zip may be used: zssl.zip
For migration assistance to Windows 2012 R2 or Windows 2016, please open a ticket with Support.
PHP / cURL
For PHP, TLS 1.2 support is dependent on the version of PHP set for the site. Which should be set to 5.5 or newer in the Winhost Control Panel.
Winhost Control Panel > Sites > the domain name > PHP
To test TLS 1.2, the script in zcurl.zip may be used: zcurl.zip