{"action":"created","issue":{"url":"https://api.github.com/repos/OctopusDeploy/Issues/issues/1902","labels_url":"https://api.github.com/repos/OctopusDeploy/Issues/issues/1902/labels{/name}","comments_url":"https://api.github.com/repos/OctopusDeploy/Issues/issues/1902/comments","events_url":"https://api.github.com/repos/OctopusDeploy/Issues/issues/1902/events","html_url":"https://github.com/OctopusDeploy/Issues/issues/1902","id":100910665,"number":1902,"title":"Upgrade to TLS 1.2","user":{"login":"PaulStovell","id":47085,"avatar_url":"https://avatars.githubusercontent.com/u/47085?v=3","gravatar_id":"","url":"https://api.github.com/users/PaulStovell","html_url":"https://github.com/PaulStovell","followers_url":"https://api.github.com/users/PaulStovell/followers","following_url":"https://api.github.com/users/PaulStovell/following{/other_user}","gists_url":"https://api.github.com/users/PaulStovell/gists{/gist_id}","starred_url":"https://api.github.com/users/PaulStovell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PaulStovell/subscriptions","organizations_url":"https://api.github.com/users/PaulStovell/orgs","repos_url":"https://api.github.com/users/PaulStovell/repos","events_url":"https://api.github.com/users/PaulStovell/events{/privacy}","received_events_url":"https://api.github.com/users/PaulStovell/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/OctopusDeploy/Issues/labels/enhancement","name":"enhancement","color":"009800"}],"state":"closed","locked":false,"assignee":{"login":"PaulStovell","id":47085,"avatar_url":"https://avatars.githubusercontent.com/u/47085?v=3","gravatar_id":"","url":"https://api.github.com/users/PaulStovell","html_url":"https://github.com/PaulStovell","followers_url":"https://api.github.com/users/PaulStovell/followers","following_url":"https://api.github.com/users/PaulStovell/following{/other_user}","gists_url":"https://api.github.com/users/PaulStovell/gists{/gist_id}","starred_url":"https://api.github.com/users/PaulStovell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PaulStovell/subscriptions","organizations_url":"https://api.github.com/users/PaulStovell/orgs","repos_url":"https://api.github.com/users/PaulStovell/repos","events_url":"https://api.github.com/users/PaulStovell/events{/privacy}","received_events_url":"https://api.github.com/users/PaulStovell/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/OctopusDeploy/Issues/milestones/45","html_url":"https://github.com/OctopusDeploy/Issues/milestones/3.1.0","labels_url":"https://api.github.com/repos/OctopusDeploy/Issues/milestones/45/labels","id":784486,"number":45,"title":"3.1.0","description":"","creator":{"login":"PaulStovell","id":47085,"avatar_url":"https://avatars.githubusercontent.com/u/47085?v=3","gravatar_id":"","url":"https://api.github.com/users/PaulStovell","html_url":"https://github.com/PaulStovell","followers_url":"https://api.github.com/users/PaulStovell/followers","following_url":"https://api.github.com/users/PaulStovell/following{/other_user}","gists_url":"https://api.github.com/users/PaulStovell/gists{/gist_id}","starred_url":"https://api.github.com/users/PaulStovell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PaulStovell/subscriptions","organizations_url":"https://api.github.com/users/PaulStovell/orgs","repos_url":"https://api.github.com/users/PaulStovell/repos","events_url":"https://api.github.com/users/PaulStovell/events{/privacy}","received_events_url":"https://api.github.com/users/PaulStovell/received_events","type":"User","site_admin":false},"open_issues":0,"closed_issues":12,"state":"open","created_at":"2014-09-10T05:41:31Z","updated_at":"2015-09-18T00:06:10Z","due_on":"2015-09-15T14:00:00Z","closed_at":null},"comments":1,"created_at":"2015-08-14T01:54:17Z","updated_at":"2015-09-18T00:09:40Z","closed_at":"2015-08-14T02:03:06Z","body":"Octopus was built on .NET 4.0, which only allowed up to TLS 1.0 support. \r\n\r\nWe're moving to .NET 4.5, which means we can now speak TLS 1.2. \r\n\r\nWhen establishing a connection, Octopus and Tentacle will negotiate for the best protocol out of: \r\n\r\n - TLS 1.0\r\n - TLS 1.1\r\n - TLS 1.2\r\n\r\nWe still specify TLS 1.0 so that new versions of Octopus can talk to old Tentacles that are still running TLS 1.0. \r\n\r\nYou can however tell Windows to disable TLS 1.0 or 1.1 (or any other protocol) by configuring SChannel, which overrides the settings Octopus/Tentacle use. Here's a free tool to configure it: \r\n\r\nhttps://www.nartac.com/Products/IISCrypto\r\n\r\n![2015-08-14 11_57_19-iis crypto - 1 6 build 7](https://cloud.githubusercontent.com/assets/47085/9265817/da9579ee-427b-11e5-8c59-69320c74ce09.png)\r\n\r\nSo if you want to be TLS 1.2 only, the process would be:\r\n\r\n - Upgrade Octopus\r\n - Upgrade Tentacles\r\n - Use that tool/modify the registry to disable TLS 1.0 and 1.1"},"comment":{"url":"https://api.github.com/repos/OctopusDeploy/Issues/issues/comments/141292235","html_url":"https://github.com/OctopusDeploy/Issues/issues/1902#issuecomment-141292235","issue_url":"https://api.github.com/repos/OctopusDeploy/Issues/issues/1902","id":141292235,"user":{"login":"michaelnoonan","id":1627582,"avatar_url":"https://avatars.githubusercontent.com/u/1627582?v=3","gravatar_id":"","url":"https://api.github.com/users/michaelnoonan","html_url":"https://github.com/michaelnoonan","followers_url":"https://api.github.com/users/michaelnoonan/followers","following_url":"https://api.github.com/users/michaelnoonan/following{/other_user}","gists_url":"https://api.github.com/users/michaelnoonan/gists{/gist_id}","starred_url":"https://api.github.com/users/michaelnoonan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/michaelnoonan/subscriptions","organizations_url":"https://api.github.com/users/michaelnoonan/orgs","repos_url":"https://api.github.com/users/michaelnoonan/repos","events_url":"https://api.github.com/users/michaelnoonan/events{/privacy}","received_events_url":"https://api.github.com/users/michaelnoonan/received_events","type":"User","site_admin":false},"created_at":"2015-09-18T00:09:40Z","updated_at":"2015-09-18T00:09:40Z","body":"Release Note: Octopus Server and Tentacle now support TLS 1.2 which requires .NET 4.5"}}