Determine TLS version clients are using on a Webapi service using OWIN

aspnet / AspNetKatana

Microsoft's OWIN implementation, the Katana project

Apache License 2.0

963 stars 332 forks source link

Determine TLS version clients are using on a Webapi service using OWIN #427

Closed AtulBhartia closed 2 years ago

AtulBhartia commented 3 years ago

Our WebAPI services are using OWIN stack. We need to determine which clients are not using TLS 1.2 Is there a way to get TLS version on the server side?

Tratcher commented 3 years ago

Are you hosting on HttpListener or IIS? That information isn't accessible on HttpListener. From IIS it's available through server variables.

We recommend moving to ASP.NET Core where this information is accessible.

AtulBhartia commented 3 years ago

Thanks Tratcher for your reply. The service is hosted in httpsys and uses OwinHttpListener. Is it possible to get the tls info via HttpListenerRequest?

Tratcher commented 3 years ago

Is it possible to get the tls info via HttpListenerRequest?

No, there's no API for that.