Developing with HTTPS
- SSL Certificates
- Certificate Search
- Enabling Mixed Content in Browsers
- Local Static HTTP(S) Server
- SSL Client Test
- SSL Server Test
- SSL/TLS Compatibility
- SSL/TLS Configuration
When debugging and developing web applications to be deployed with https, we may encounter many https and SSL/TLS specific problems. Here are some resources and references I've found useful in the process.
SSL Certificates
-
Free SSL Certificates and Free SSL Tools @ ZeroSSL - Zero cost SSL
Free SSL certificates trusted by all major browsers or Self-signed SSL certificates in minutes.
Certificate Search
-
Enter an Identity (Domain Name, Organization Name, etc), a Certificate Fingerprint (SHA-1 or SHA-256) to search.
Enabling Mixed Content in Browsers
Local Static HTTP(S) Server
Name | Language | Project Home |
---|---|---|
http-server | Node.js | https://github.com/indexzero/http-server |
SSL Client Test
SSL Server Test
SSL/TLS Compatibility
Browser Compatibility Table
Windows Compatibility Table
Java Compatibilitiy Docs
.NET Compatibilitiy Table
Version | SSL 2.0 | SSL 3.0 | TLS 1.0 | TLS 1.1 | TLS 1.2 |
---|---|---|---|---|---|
.NET Framework < 4.5 | Not Supported | Enabled | Enabled | Not Supported | Not Supported |
.NET Framework >= 4.5 | Not Supported | Enabled | Enabled | Disabled | Disabled |
.NET Core 2.0 | Not Supported | Not Supported | Enabled | Enabled | Enabled |
.NET Core 2.1 | Disabled | Disabled | Enabled | Enabled | Enabled |
Note: Disabled values are supported, but not enabled by default.
Note: Supported values are still subject to OS restrictions, i.e. requring OS level support.
Used SSL/TLS versions are configurable via System.Net.ServicePointManager.SecurityProtocol
, e.g.
using System.Net;
ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls11 | SecurityProtocolType.Tls12;
Ref: SecurityProtocolType Enum (System.Net) | Microsoft Docs, SecurityProtocolType Enumeration (System.Net)
SSL/TLS Configuration
Browser Configuration How-to
Web Server Configuration How-to
IIS Configuration How-to
- Microsoft IIS Disabling SSL v3 Instructions – DigiCert.com
- How to disable PCT 1.0, SSL 2.0, SSL 3.0, or TLS 1.0 in Internet Information Services