Support more TLS1.2 cipher suites

Hello.

I have upload a txt file. Share link is created. I have a windows application that use the above "Direct Link" so that the users of the application can download the txt file. The application uses Net.WebClient with Net.ServicePointManager.SecurityProtocol = Net.SecurityProtocolType.Tls12. If the application is executed on windows 10 or windows server 2016 everything works fine. Before a couple of days, the application worked also on Windows 7 SP1, Windows Server 2008 R2 SP1 and Windows Server 2012 R2. But the last few days, the download fails, with the error message "System.Net.WebException: The request was aborted: Could not create SSL/TLS secure channel." After a lot research, I think that the problem is the list of SSL cipher suites that you support.

Could you please support more TLS1.2 cipher suites, so that old operation systems, which support TLS1.2 can download shared files?

Mateusz Woda

May 17, 2022 13:12
Edited

Hello Optisoft (Ant)

Could you please provide your operating system, .NET runtime version and Box SDK version where this exception is occurring? Also, what specific cipher suite are you talking about that we should add support for? We do not restrict any of the cipher suites, we simply force the client to use at least TLS 1.1 or TLS 1.2 (depending which sdk are you using). So if it's enabled on the client, there should be no additional configuration necessary.

Also, you mentioned that everything was working fine before, so please check if anything has changed in your network configuration.

You can also take a look at this article to verify that your TLS cipher suite configuration.

https://docs.microsoft.com/en-us/windows-server/security/tls/manage-tls#configuring-tls-cipher-suite-order

Thanks,

Mateusz

Comments