指定用于 WSHttpBinding 客户端连接的 SSL 协议版本

Question

是否可以指定通过 WSHttpBinding 使用 Web 服务时使用的 SSL 协议的版本？

我一直在使用跟踪日志来尝试确定我使用客户端证书通过 SSL 调用 Web 服务失败的原因。

最终的日志记录显示警报15 03 01 00 02 和警报代码02 0A，这是一个意外错误。我怀疑这个错误是因为服务器无法处理我扔给它的 SSL 版本。

System.Net.Sockets Verbose: 0 : [13908] Exiting Socket#15927457::Send()     -> Int32#138
System.Net.Sockets Verbose: 0 : [13908] Socket#15927457::Receive()
System.Net.Sockets Verbose: 0 : [13908] Data from Socket#15927457::Receive
System.Net.Sockets Verbose: 0 : [13908] 00000000 : 15 03 01 00 02                                  : .....
System.Net.Sockets Verbose: 0 : [13908] Exiting Socket#15927457::Receive()  -> Int32#5
System.Net.Sockets Verbose: 0 : [13908] Socket#15927457::Receive()
System.Net.Sockets Verbose: 0 : [13908] Data from Socket#15927457::Receive
System.Net.Sockets Verbose: 0 : [13908] 00000005 : 02 0A                                           : ..
System.Net.Sockets Verbose: 0 : [13908] Exiting Socket#15927457::Receive()  -> Int32#2
System.Net Information: 0 : [13908] InitializeSecurityContext(credential = System.Net.SafeFreeCredential_SECURITY, context = 79d80e8:7a0e230, targetName = dsl-wholesale-testing.iinet.net.au, inFlags = ReplayDetect, SequenceDetect, Confidentiality, AllocateMemory, InitManualCredValidation)
System.Net Information: 0 : [13908] InitializeSecurityContext(In-Buffers count=2, Out-Buffer length=0, returned code=IllegalMessage).
System.Net.Sockets Verbose: 0 : [13908] Socket#15927457::Dispose()
System.Net Error: 0 : [13908] Exception in HttpWebRequest#41613110:: - The request was aborted: Could not create SSL/TLS secure channel..
System.Net Error: 0 : [13908] Exception in HttpWebRequest#41613110::GetResponse - The request was aborted: Could not create SSL/TLS secure channel..

我有一个基于 PHP 的客户端，它使用相同的 Web 服务，我通过 cURL (curl_setopt($ch, CURLOPT_SSLVERSION, 3);) 指定 SSL 版本 3。

Answer 1

版本可以设置如下：

System.Net.ServicePointManager.SecurityProtocol = System.Net.SecurityProtocolType.Ssl3;