asked on

Msxml2.ServerXMLHTTP.6.0 not using TLS1.2 in Windows Server 2012

I am using Classic ASP and discovered that Windows 2008 R2 does not support TLS1.2 for either of these methods WinHTTP.WinHTTPRequest.5.1 or Msxml2.ServerXMLHTTP.6.0 (TLS1.2 will now be required by Paypal from June 2016)

Various threads state that the only solution is to upgrade to Windows Server 2012.

So I have now upgraded a test server from 2008R2 to 2012. I have now found that WinHTTP.WinHTTPRequest.5.1 now truly supports TLS1.2 but Msxml2.ServerXMLHTTP.6.0 DOES NOT.

When using MSXML2 I still get an error An error occurred in the secure channel support in msxml6.dll. When the conneciton to Paypal is viewed in Wireshark, you can see that TLSv1 and SSLv3 are still attempted, even though those protocols are disabled (using IIS Crypto)

So wondering why this is the case?

Dan McFadden

Can you post the code you're using to instantiate the Msxml2.ServerXMLHTTP.6.0 object?

Are you doing:

Set objXML = Server.CreateObject("MSXML2.ServerXMLHTTP.6.0")

Open in new window

- or -

Set objXML = Server.CreateObject("MSXML2.XMLHTTP.6.0")

Open in new window

Dan

simonchalk2016

ASKER

I am using Server.CreateObject("Msxml2.ServerXMLHTTP.6.0")

I have actually also tried Server.CreateObject("MSXML2.XMLHTTP.6.0") This equally gives an error, although different "Error= The system cannot locate the resource specified."

Dan McFadden

Is there anything blocking communication with the paypal endpoint? The error you posted above indicates it could not communicate with the defined destination.

Dan

simonchalk2016

ASKER

Don't think so. I can connect from a browsers fine to paypal end point, in fact Paypal offer a test to see if tls1.2 is working, and this is fine from the browser.

Using Code both are connecting to the same URL

This works:

Set objHttp = Server.CreateObject("WinHTTP.WinHTTPRequest.5.1")
WinHttpRequestOption_SslErrorIgnoreFlags=4
objHttp.Option(WinHttpRequestOption_SslErrorIgnoreFlags) = &H3300
objHttp.Option(9) = &H0AA0
objHttp.setTimeouts 0, 120000, 120000, 120000
objHttp.open "POST", URL, False

THIS FAILS:

Set objhttp = Server.CreateObject("Msxml2.ServerXMLHTTP.6.0")
objHttp.open "POST", URL, False

THIS ALSO FAILS

Set objhttp = Server.CreateObject("Msxml2.XMLHTTP.6.0")
objHttp.open "POST", URL, False

Dan McFadden

Do you have a proxy in place to manage Internet access?

Can you post the result of the following command?

netsh winhttp show proxy

Dan

simonchalk2016

ASKER

No there is no proxy.

netsh winhttp show proxy returns this response

"
Current WinHTTP proxy settings:

Direct access (no proxy server).
"

Dan McFadden

Have you read this EE post?

Link: https://www.experts-exchange.com/questions/28134229/ServerXMLHTTP-6-0-and-HTTPS.html

Maybe nudge in the right direction?

Dan

ASKER CERTIFIED SOLUTION

simonchalk2016

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

Dan McFadden

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

simonchalk2016

ASKER

Yes agreed about upgrading the OS, fortunately it is a test system. Would still like to get to the bottom of what is going on though, since was quite happy with 2008R2 until all this kicked off.