Skip to content

Commit cc5bc54

Browse files
committed
Use default SslProtocols in Kestrel
1 parent 648c15d commit cc5bc54

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

src/Servers/Kestrel/Core/src/HttpsConnectionAdapterOptions.cs

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,6 @@ public class HttpsConnectionAdapterOptions
2424
public HttpsConnectionAdapterOptions()
2525
{
2626
ClientCertificateMode = ClientCertificateMode.NoCertificate;
27-
SslProtocols = SslProtocols.Tls12 | SslProtocols.Tls11;
2827
HandshakeTimeout = TimeSpan.FromSeconds(10);
2928
}
3029

@@ -61,7 +60,8 @@ public HttpsConnectionAdapterOptions()
6160
public Func<X509Certificate2, X509Chain, SslPolicyErrors, bool> ClientCertificateValidation { get; set; }
6261

6362
/// <summary>
64-
/// Specifies allowable SSL protocols. Defaults to <see cref="SslProtocols.Tls12" /> and <see cref="SslProtocols.Tls11"/>.
63+
/// Specifies allowable SSL protocols. Defaults to <see cref="SslProtocols.None" /> which allows the operating system to choose the best protocol to use,
64+
/// and to block protocols that are not secure. Unless your app has a specific reason not to, you should use this default.
6565
/// </summary>
6666
public SslProtocols SslProtocols { get; set; }
6767

0 commit comments

Comments
 (0)