4

我正在使用 .NET Core 3.0 制作仅支持 TLS 1.3 的代理，我看到 SslProtocols 中定义了 Tls13 = 12288。但是在我的测试过程中，它只抛出异常“客户端和服务器无法通信，因为它们不具备通用算法”。所以我的问题是 .NET Core 3.0 现在是否支持 TLS 1.3？

我用的是Visual Studio Professional 2019 16.3.0 预览版3.0，我的项目是netcore3.0

Tls13 is defined in SslProtocols

//
// Summary:
//     Defines the possible versions of System.Security.Authentication.SslProtocols.
[Flags]
public enum SslProtocols {
    //
    // Summary:
    //     Allows the operating system to choose the best protocol to use, and to block
    //     protocols that are not secure. Unless your app has a specific reason not to,
    //     you should use this field.
    None = 0,
    //
    // Summary:
    //     Specifies the SSL 2.0 protocol. SSL 2.0 has been superseded by the TLS protocol
    //     and is provided for backward compatibility only.
    Ssl2 = 12,
    //
    // Summary:
    //     Specifies the SSL 3.0 protocol. SSL 3.0 has been superseded by the TLS protocol
    //     and is provided for backward compatibility only.
    Ssl3 = 48,
    //
    // Summary:
    //     Specifies the TLS 1.0 security protocol. The TLS protocol is defined in IETF
    //     RFC 2246.
    Tls = 192,
    //
    // Summary:
    //     Use None instead of Default. Default permits only the Secure Sockets Layer (SSL)
    //     3.0 or Transport Layer Security (TLS) 1.0 protocols to be negotiated, and those
    //     options are now considered obsolete. Consequently, Default is not allowed in
    //     many organizations. Despite the name of this field, System.Net.Security.SslStream
    //     does not use it as a default except under special circumstances.
    Default = 240,
    //
    // Summary:
    //     Specifies the TLS 1.1 security protocol. The TLS protocol is defined in IETF
    //     RFC 4346.
    Tls11 = 768,
    //
    // Summary:
    //     Specifies the TLS 1.2 security protocol. The TLS protocol is defined in IETF
    //     RFC 5246.
    Tls12 = 3072,
    //
    // Summary:
    //     Specifies the TLS 1.3 security protocol. The TLS protocol is defined in IETF
    //     RFC 8446.
    Tls13 = 12288
}
4

1 回答 1

5

谷歌是你的朋友：
https ://docs.microsoft.com/en-us/dotnet/core/whats-new/dotnet-core-3-0

Linux .NET Core 上的 TLS 1.3 和 OpenSSL 1.1.1 现在利用 OpenSSL 1.1.1 中的 TLS 1.3 支持（当它在给定环境中可用时）。使用 TLS 1.3：

随着客户端和服务器之间所需的往返次数减少，连接时间得到改善。由于删除了各种过时和不安全的加密算法，提高了安全性。如果可用，.NET Core 3.0 在 Linux 系统上使用 OpenSSL 1.1.1、OpenSSL 1.1.0 或 OpenSSL 1.0.2。当 OpenSSL 1.1.1 可用时，System.Net.Security.SslStream 和 System.Net.Http.HttpClient 类型都将使用 TLS 1.3（假设客户端和服务器都支持 TLS 1.3）。

于 2019-09-12T19:04:22.430 回答