0

Enable cast (System.Security.Authentication.SslProtocols)3072) on window server 2008 r2 without patch

I have a function written in c# framework 2.0 that performs authentication by setting the tls 1.2 protocol using an enum, on windows 10 and windows server 2012 works while on windows server 2008 R2 only works if updated with the latest patches. I need not to perform the updates, is there any registry key to enable the enum on the c# code that I report below?

the 2.0 and 4.5 .Net framework are installed on the server

SslStream sslStream;

sslStream = new SslStream(clientSocket.GetStream(), false, certificateValidator);

// Authenticate the server
try
{
    sslStream.AuthenticateAsClient(hostname,null,((System.Security.Authentication.SslProtocols)3072), false);
}
catch (Exception ex)
{
    throw ex;
}

invalid value specified in 'SslProtocolType' enumeration

Angelo
  • 101
  • 1
  • 9
  • 1
    "I need not to perform the updates" WHY. – Ian Kemp Jan 04 '19 at 19:56
  • The servers are under a policy that does not update, do not have any internet connection. what I ask is if there is a registry key that validates the enumeration ... the tls.12 protocol works to send mail but does not read mails, remember that the framework used is 2.0 – Angelo Jan 04 '19 at 19:57
  • Simply adding a registry key isn't whats making it work. I'm 99% sure the update include security updates to dlls and other items that allow it to work. – Erik Philips Jan 04 '19 at 20:11
  • I enabled sending mail in tls1.2 simply adding a line in the registry (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client & Server) I thought that even for this problem could be done – Angelo Jan 04 '19 at 20:26
  • Running a 10+ year old unpatched operating system is a profoundly bad idea regardless of the circumstances. – Daniel Mann Jan 04 '19 at 20:27

2 Answers2

0

I've used

https://www.nartac.com/Products/IISCrypto

To enable and disable specific cipher on windows server. This will be a nice UI that will handle all the registery key for you.

JM123
  • 167
  • 1
  • 12
0

I solved the enum cast problem by installing the KB4471987 update (in detail on kb4470641).

Angelo
  • 101
  • 1
  • 9