#2076 Support TLS 1.1 and 1.2

[Louis Matthijssen]

Currently, only SSL 3 and TLS 1.0 are supported for WebDAV. I would like support for TLS 1.1 and 1.2, because SSL 3 and TLS 1.0 have known vulnerabilities.

I've succeeded to enable this, by setting the target framework for all projects to .NET 4.5 and adding the following line to the PrepareWebAccess method:

ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12 | SecurityProtocolType.Tls11 | SecurityProtocolType.Tls;

[Dominik Reichl]

Thanks for the suggestion. KeePass 2.32 will set ServicePointManager.SecurityProtocol to support SSL 3, TLS 1.0, TLS 1.1 and TLS 1.2, when running under .NET 4.5. When running under an earlier .NET version, KeePass will not try to enable TLS 1.1 and TLS 1.2 (as they're not supported by the earlier framework anyway).

Here's the latest development snapshot for testing:
http://keepass.info/filepool/KeePass_160110.zip

Moving to closed feature requests.

Best regards,
Dominik

[Dominik Reichl]

Ticket moved from /p/keepass/bugs/1464/