Windows 2008 IIS7中开启TLS1.2

忘是亡心i 2023-06-24 04:53 4阅读 0赞

服务器是阿里云的window server 2008 R2 ，在IIS上发布Webservices时发现微信小程序的wx.request要求HTTPS 服务器的 TLS 版本必须支持1.2  
TLS网页检测网站：[https://www.ssllabs.com/ssltest/index.html][https_www.ssllabs.com_ssltest_index.html]检查得到原来服务器TLS为1.0

查看服务器是否可以升为TLS1.2  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E4NzM3NDQ3Nzk_size_16_color_FFFFFF_t_70][]

## 配置TLS1.2 ##

### 手动设置 ###

找到`HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols`右键->新建->项->新建`TLS 1.1`,`TLS 1.2`  
TLS 1.1和TLS 1.2 右键->新建->项->新建`Server`, `Client`  
在新建的Server和Client中都新建如下的项(DWORD 32位值), 总共4个

DisabledByDefault [Value = 0]
    Enabled [Value = 1]

如图

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E4NzM3NDQ3Nzk_size_16_color_FFFFFF_t_70 1][]

禁用老SSL配置

打开`HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client` 配置如下

DisabledByDefault [Value = 0]
    Enabled [Value = 0]

[https_www.ssllabs.com_ssltest_index.html]: https://www.ssllabs.com/ssltest/index.html
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E4NzM3NDQ3Nzk_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20191220171758789.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E4NzM3NDQ3Nzk=,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E4NzM3NDQ3Nzk_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20191220202155830.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2E4NzM3NDQ3Nzk=,size_16,color_FFFFFF,t_70