3

We need to track client TLS version for self-hosted WCF services with HTTPS binding in order to detect users with outdated version (TLS 1.0) to contact them with request to update.

.NET Framework version is 4.7.2 IIS hosting is not an option. Maybe there is some network tool similar to Wireshark to track this info on the server?

P.S. My question is very similar to this one, but it is still not yet resolved: WCF service (self-hosted) over HTTPS - Get negotiated SSL/TLS protocol version

Mental_Force
  • 31
  • 2

1 Answers1

1

If you capture the connection creation in Wireshark, and examine the first packet from the client, then Wireshark will annotate the fields in the ClientHello struct for you, including the TLS version requested by the client.

Similarly, if you look at the first reply packet from the server, then Wireshark will annotate the fields in the ServerHello struct for you, including the TLS version settled on for the connection.

Here is the reference:The First Few Milliseconds of an HTTPS Connection and How to test which version of TLS my .NET client is using?

Theobald Du
  • 824
  • 4
  • 7