Checking / Updating Outbound TLS 1.2 Support

Due to changes in security, it may be necessary to update or migrate a site to use TLS 1.2 for outbound connections.  Most notably for a payment gateway.  For general information, including testing, find the applicable scripting section below (ASP.NET, Classic ASP, or PHP).  If it's necessary to migrate the site to a newer version of Windows or you require assistance with reviewing TLS 1.2 support, please open a ticket with the Support Department.

 

 

 

The version of Windows Server, necessary to check for ASP.NET and Classic ASP support, can be ascertained by reviewing the Server Name in the Winhost Control Panel, then matching it against the key below.  The Web Server field in the Winhost Control Panel will show whether the site is on Windows Server 2008, 2012, or 2016, but the key below will specify whether it's on 2008 R2 or 2012 R2.

 

Winhost Control Panel > Sites > the domain name > Site info pane

 

 

 

 

 

The requirements for TLS 1.2 support when using ASP.NET are Windows Server 2012 R2 or 2016, ASP.NET Framework 4.5 or higher and bootstrapping code to set the TLS version.

 

If a site is hosted on an older version of Windows, for migration assistance to Windows 2012 R2 or Windows 2016, please open a ticket with Support.

If a site is using an ASP.NET Framework older than 4.5 it will need to be updated.  Note this is a project update rather than the ASP.NET Framework version set in the Winhost Control Panel.

To set the TLS version for an outbound connection, add the following to the script making the connection or the global.asax:

System.Net.ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12

More information regarding the last update can be found after the link https://stackoverflow.com/q/28286086.  Also note that the bootstrapping code would have to be updated if TLS requirements were to change in the future.

 

 

 

TLS 1.2 support through Classic ASP the site should be on a Windows 2012 R2 or Windows 2016 server.

 

To test TLS 1.2, the script in zssl.zip may be used:  zssl.zip

 

For migration assistance to Windows 2012 R2 or Windows 2016, please open a ticket with Support.

 

 

 

For PHP, TLS 1.2 support is dependent on the version of PHP set for the site.  Which should be set to 5.5 or newer in the Winhost Control Panel.

 

Winhost Control Panel > Sites > the domain name > PHP

 

 

To test TLS 1.2, the script in zcurl.zip may be used:  zcurl.zip