Windows 7 Could not create SSL/TLS secure channel."} System.Net.WebException
I am running Windows 7 64 bit Pro and Trying to write a RSS Feed Reader
here is the ERROR msg - $exception {"The request was aborted: Could not create SSL/TLS secure channel."} System.Net.WebException
I am told this error does not happen on a Windows 10 Machine.
Any Idea How to Fix this on Windows 7?
I am using Visual Studio 2019 This is a ASP.Net with Visual Basic.
This error occurs on Windows 7 due to the TLS settings. According to Solving the TLS 1.0 Problem, 2nd Edition, TLS 1.2 is Disabled by default. Therefore, it needs to be enabled. Ensure that you've installed SP 1. Then,
Create a restore point
- Open Control Panel
- Select View by: Small icons
- Click System
- On left side, click System protection
- If protection isn't turned on for the
C:, then click Configure to turn it on. Select desired size and click OK. - Click Create to create a restore point
- Enter desired name for restore point
- Click Create
Go to
Update to enable TLS 1.1 and TLS 1.2 as default secure protocols in WinHTTP in Windows and click on Easy Fix
Copy the code/text below to a file that ends in .reg (ex: TLSFix.reg).
- Open you're favorite text editor (ex: Notepad)
- Copy the code/text below
- Save file with a ".reg" extension (ex: TLSFix.reg). Alternatively, save with a ".txt" extension. Then right-click the file and rename it so that it has a ".reg" extension.
Win 7 (64-bit):
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"SecureProtocols"=dword:00000aa8
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000a00
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000a00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]
"Enabled"=dword:00000001
"DisabledByDefault"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server]
"Enabled"=dword:00000001
"DisabledByDefault"=dword:00000000
Then double click the file to add the entries to the registry. Alternatively, add each of the registry entries to the registry using regedit.
Note: The registry entries above are discussed in Update to enable TLS 1.1 and TLS 1.2 as default secure protocols in WinHTTP in Windows and Transport Layer Security (TLS) registry settings.
Resources:
- Solving the TLS 1.0 Problem, 2nd Edition
- Windows and Supported TLS Versions
- Update to enable TLS 1.1 and TLS 1.2 as default secure protocols in WinHTTP in Windows
- Transport Layer Security (TLS) registry settings
- Transport Layer Security (TLS) best practices with the .NET Framework
- TLS/SSL Tools and Settings
- CA5386: Avoid hardcoding SecurityProtocolType value