-
Notifications
You must be signed in to change notification settings - Fork 7
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
HttpClientHandler.ServerCertificateCustomValidationCallback requires .NET Framework 4.7.1 #5
Comments
I just ran across this myself and hadn't updated the repo yet. I think it is very likely I'll have to change the minimum .NET framework requirement to 4.7.1 because of this. I looked around but 4.6 doesn't seem to have anything that can accomplish the same task. |
What about using System.Net.Http.WinHttpHandler instead? (idea taken from dotnet/runtime#15697 (comment))
Based on the dependencies listed from nuget, it seems like it should be compatible with 4.6.1: |
@tloveland1 My biggest concern there is that, per the docs at https://docs.microsoft.com/en-us/dotnet/api/system.net.http.winhttphandler?view=dotnet-plat-ext-6.0
I think this may be a deal-breaker, as we want to support Linux and Mac .NET applications as well. |
Ah, I did not see that. What about using it conditionally just for Windows platforms?
|
I'll look into it. The docs were not very clear on whether using the (As opposed to ServerCertificateCustomValidationCallback, which I confirmed does some initial checking - signatures, etc. - and sends the delegate that information in SslPolicyErrors to use in making the decision.) |
@tloveland1 I'm taking a look at this again, and the documentation at https://docs.microsoft.com/en-us/dotnet/api/system.net.http.winhttphandler.servercertificatevalidationcallback indicates this property is available in .NET core 1.0 and 1.1, some .NET platform extensions, and some Xamarin stuff. I'm not very familiar with .NET environments, but doesn't this mean that it's not guaranteed to be available in .NET Framework applications? |
I believe that refers to the compatibility of System.Net.Http.WinHttpHandler.dll, which provides the WinHttpHandler class. You would pull in System.Net.Http.WinHttpHandler.dll as a package in this library to use it (https://www.nuget.org/packages/System.Net.Http.WinHttpHandler/) That nuget package lists compatibility with .NET Framework 4.6.1 |
The repo states the library requires .NET 4.6.1, but this property did not exist until .NET Framework 4.7.1:
duo_universal_csharp/DuoUniversal/Client.cs
Line 417 in 4a8d878
https://docs.microsoft.com/en-us/dotnet/api/system.net.http.httpclienthandler.servercertificatecustomvalidationcallback?view=netframework-4.7.1
Trying to use the client on a Windows machine that does not have at least .NET Framework 4.7.1 would most likely cause a runtime error. It would be really nice to use this with my .NET 4.6.2 web app, but I foresee this being a reason I can't.
The text was updated successfully, but these errors were encountered: