{"action":"created","issue":{"url":"https://api.github.com/repos/Azure/Azure-Functions/issues/482","repository_url":"https://api.github.com/repos/Azure/Azure-Functions","labels_url":"https://api.github.com/repos/Azure/Azure-Functions/issues/482/labels{/name}","comments_url":"https://api.github.com/repos/Azure/Azure-Functions/issues/482/comments","events_url":"https://api.github.com/repos/Azure/Azure-Functions/issues/482/events","html_url":"https://github.com/Azure/Azure-Functions/issues/482","id":255712924,"number":482,"title":"Default SSL/TLS version mismatch between local dev and remote functions","user":{"login":"jonmclean","id":4429525,"avatar_url":"https://avatars2.githubusercontent.com/u/4429525?v=4","gravatar_id":"","url":"https://api.github.com/users/jonmclean","html_url":"https://github.com/jonmclean","followers_url":"https://api.github.com/users/jonmclean/followers","following_url":"https://api.github.com/users/jonmclean/following{/other_user}","gists_url":"https://api.github.com/users/jonmclean/gists{/gist_id}","starred_url":"https://api.github.com/users/jonmclean/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jonmclean/subscriptions","organizations_url":"https://api.github.com/users/jonmclean/orgs","repos_url":"https://api.github.com/users/jonmclean/repos","events_url":"https://api.github.com/users/jonmclean/events{/privacy}","received_events_url":"https://api.github.com/users/jonmclean/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-09-06T19:14:15Z","updated_at":"2017-09-08T11:10:32Z","closed_at":null,"author_association":"NONE","body":"Different versions of the SSL/TLS protocol are enabled by default in local development and functions deployed to Azure.\r\n\r\nMy organization uses Azure Functions that make calls to other web services.  We noticed that in some cases these functions could make HTTPS calls to a particular service when running locally but the HTTPS calls failed when running the Azure Function from Azure.  It turns out that one web service we are calling only accepts TLS 1.1 or TLS 1.2.  Running the function locally through Visual Studio Azure Function tools, TLS 1.2 was enabled.  Running through Azure Functions deployed on Azure TLS 1.1 and 1.2 were disabled.\r\n\r\nI have attached a sample function project that demonstrates this issue.\r\n\r\nTraceWriter output when run locally: \"Default SSL protocols for outbound HTTPS calls: Tls, Tls11, Tls12\"\r\nTraceWriter output when run on Azure: \"Default SSL protocols for outbound HTTPS calls: Ssl3, Tls\"\r\n \r\nThe project I attached is set to target .NET 4.7.\r\n\r\n[TLSTestApp.zip](https://github.com/Azure/Azure-Functions/files/1282375/TLSTestApp.zip)\r\n"},"comment":{"url":"https://api.github.com/repos/Azure/Azure-Functions/issues/comments/328075777","html_url":"https://github.com/Azure/Azure-Functions/issues/482#issuecomment-328075777","issue_url":"https://api.github.com/repos/Azure/Azure-Functions/issues/482","id":328075777,"user":{"login":"frli","id":1047912,"avatar_url":"https://avatars0.githubusercontent.com/u/1047912?v=4","gravatar_id":"","url":"https://api.github.com/users/frli","html_url":"https://github.com/frli","followers_url":"https://api.github.com/users/frli/followers","following_url":"https://api.github.com/users/frli/following{/other_user}","gists_url":"https://api.github.com/users/frli/gists{/gist_id}","starred_url":"https://api.github.com/users/frli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/frli/subscriptions","organizations_url":"https://api.github.com/users/frli/orgs","repos_url":"https://api.github.com/users/frli/repos","events_url":"https://api.github.com/users/frli/events{/privacy}","received_events_url":"https://api.github.com/users/frli/received_events","type":"User","site_admin":false},"created_at":"2017-09-08T11:10:32Z","updated_at":"2017-09-08T11:10:32Z","author_association":"NONE","body":"Reprod and +1 for this. \r\n\r\n`Tls12` should be the default and the rest opt-in if you really need to talk a service that only support  earlier versions of  Tls. `Ssl3` should be completely disabled.\r\n\r\nForcibly setting `System.Net.ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12;` does work in Azure 💥🔨 "}}
{"actor":{"display_login":"frli"}}