{"id":1546,"date":"2018-08-04T01:02:29","date_gmt":"2018-08-03T22:02:29","guid":{"rendered":"http:\/\/guvensahin.com\/?p=1546"},"modified":"2020-05-12T23:57:26","modified_gmt":"2020-05-12T20:57:26","slug":"dynamics-ax-sadece-tls-1-2-destekleyen-web-servislerin-kullanimi","status":"publish","type":"post","link":"https:\/\/guvensahin.com\/tr\/dynamics-ax-sadece-tls-1-2-destekleyen-web-servislerin-kullanimi\/","title":{"rendered":"Dynamics AX 2009\/2012: Sadece TLS 1.2 Destekleyen Web Servislerin Kullan\u0131m\u0131"},"content":{"rendered":"

Bu yaz\u0131da hem ax 2009 hemde ax 2012 de TLS<\/a> 1.2 gibi g\u00fcncel g\u00fcvenlik protokol\u00fcn\u00fc destekleyen web servislere nas\u0131l eri\u015febilece\u011fimizden bahsedece\u011fim. Bir sunucu sadece TLS 1.2 destekliyorsa ax i\u00e7inden bir istek g\u00f6nderdi\u011finizde a\u015fa\u011f\u0131daki hata ile kar\u015f\u0131la\u015f\u0131rs\u0131n\u0131z.<\/p>\n

The underlying connection was closed: An unexpected error occurred on a send. Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. An existing connection was forcibly closed by the remote host.<\/em><\/strong><\/p>\n

TLS 1.0 protokol\u00fcn\u00fcn a\u00e7\u0131klar\u0131 oldu\u011fu i\u00e7in baz\u0131 sunucular direkt olarak bloklamakta. Bu hatay\u0131 giderebilmek i\u00e7in, ax i\u00e7inden sunucuya istekte bulunurken g\u00fcvenlik protokol\u00fcn\u00fc sunucunun destekledi\u011fi TLS s\u00fcr\u00fcm\u00fc olarak ayarlamak gerekiyor. Buda genellikle 1.1 yada 1.2 olmakta.<\/p>\n

 <\/p>\n

Bir Sitenin Destekledi\u011fi TLS Versiyonunu \u00d6\u011frenme<\/h2>\n

Bir sitenin hangi g\u00fcvenlik protokollerini destekledi\u011fini g\u00f6rmek i\u00e7in bu adresteki servisi kullanabilirsiniz<\/strong><\/a>.<\/p>\n

\u00d6rne\u011fin:<\/p>\n

google.com<\/strong><\/a> – t\u00fcm TLS s\u00fcr\u00fcmlerini destekliyor<\/strong><\/a>.<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

incapsula.com<\/a><\/strong> – sadece TLS 1.2 destekliyor<\/strong><\/a>.<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

Bu sorunu giderebilmek i\u00e7in ax s\u00fcr\u00fcmlerine g\u00f6re farkl\u0131 aksiyonlar almam\u0131z gerekiyor. Burada kilit nokta a\u015fa\u011f\u0131daki belirtti\u011fim kod par\u00e7ac\u0131\u011f\u0131. Bu \u00e7al\u0131\u015ft\u0131ktan sonra yap\u0131lacak olan t\u00fcm requestlerde .NET’in kulland\u0131\u011f\u0131 varsay\u0131lan TLS versiyonunu 1.2 yap\u0131yoruz.<\/p>\n

System.Net.ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12 | SecurityProtocolType.Tls11 | SecurityProtocolType.Tls;\r\n<\/pre>\n
 <\/p>\n
AX 2009 i\u00e7in<\/h2>\n
Ax 2009 .NET 3.5 kullan\u0131yor. Ve bu s\u00fcr\u00fcmde sadece SSL 3 ve TLS 1.0 kullanabiliyorsunuz. TLS 1.2 isteyen bir siteye eri\u015fmek yapabilece\u011finiz en iyi y\u00f6ntem .Net 4.0 veya \u00fcst\u00fcn\u00fc kullanan bir asmx web servis yaz\u0131p bunu ax 2009 i\u00e7inde \u00e7a\u011f\u0131rmak olacakt\u0131r. Web servisde ise a\u015fa\u011f\u0131da verdi\u011fim \u00f6rnek kodu kullanabilirsiniz.<\/p>\n
\u00d6rnek kod .NET Framework’\u00fcn en g\u00fcncel y\u00f6ntemi olan HttpClient<\/strong><\/a>‘\u0131 kullan\u0131yor. Bu k\u00fct\u00fcphaneyi kullanabilmek asmx servisin versiyonu .NET Framework 4.5+ olmal\u0131. 4.0 versiyonu i\u00e7in bu linkte yer alan<\/strong><\/a> WebRequest vb. legacy y\u00f6ntemler ile sorguyu g\u00fcncelleyebilirsiniz. Burada \u00f6nemli nokta SecurityProtocol atamas\u0131 yapt\u0131\u011f\u0131m\u0131z b\u00f6l\u00fcm\u00fcn aynen kalmas\u0131 gerekiyor.<\/p>\n
 <\/p>\n
\/\/ G\u00fcven \u015eahin - guvensahin.com\r\npublic HttpResponseMessage GetProductImages()\r\n{\r\n\ttry\r\n\t{\r\n\t\tstring ret = String.Empty;\r\n\t\tstring url = \"\"; \/\/ istek yap\u0131lacak url yaz\u0131lmal\u0131\r\n\r\n\t\tusing (var client = new HttpClient())\r\n\t\t{\r\n\t\t\t\/\/ istek yaparken TLS 1.2'yi varsay\u0131lan g\u00fcvenlik protokol\u00fc olarak at\u0131yoruz\r\n\t\t\tSystem.Net.ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12 | SecurityProtocolType.Tls11 | SecurityProtocolType.Tls;\r\n\r\n\r\n\t\t\tclient.Timeout = new TimeSpan(0, 2, 0); \/\/ 2 min\r\n\r\n\t\t\ttry\r\n\t\t\t{\r\n\t\t\t\tvar response = client.GetAsync(url).Result;\r\n\r\n\t\t\t\tif (response.IsSuccessStatusCode)\r\n\t\t\t\t{\r\n\t\t\t\t\tret = response.Content.ReadAsStringAsync().Result;\r\n\t\t\t\t}\r\n\t\t\t\telse\r\n\t\t\t\t{\r\n\t\t\t\t\tvar msg = \"url: \" + url + \"\\n\"\r\n\t\t\t\t\t\t+ \"StatusCode: \" + response.StatusCode.ToString() + \"\\n\"\r\n\t\t\t\t\t\t+ \"ReasonPhrase: \" + response.ReasonPhrase;\r\n\t\t\t\t\tthrow new Exception(msg);\r\n\t\t\t\t}\r\n\t\t\t}\r\n\t\t\tfinally\r\n\t\t\t{\r\n\t\t\t\tclient.Dispose();\r\n\t\t\t}\r\n\t\t}\r\n\r\n\t\treturn Request.CreateResponse(HttpStatusCode.OK, ret);\r\n\t}\r\n\tcatch (Exception ex)\r\n\t{\r\n\t\treturn Request.CreateResponse(HttpStatusCode.InternalServerError, ex);\r\n\t}\r\n}\r\n<\/pre>\n
 <\/p>\n
AX 2012 i\u00e7in<\/h2>\n
AX 2012 .NET 4.0 kulland\u0131\u011f\u0131 i\u00e7in .NET’te ge\u00e7erli olan SecurityProtocol komutunu direkt ax i\u00e7inden \u00e7a\u011f\u0131rabiliyoruz. A\u015fa\u011f\u0131daki \u00f6rnek job’\u0131 kullanarak TLS 1.2 destekli bir siteye direkt istekte bulunabilirsiniz. SecurityProtocol atamas\u0131 yapan k\u0131sm\u0131 commentleyip denerseniz TLS 1.0’a d\u00f6nece\u011fi i\u00e7in yaz\u0131n\u0131n ba\u015f\u0131nda belirtti\u011fim hatay\u0131 alacaks\u0131n\u0131z.<\/p>\n
\/\/ G\u00fcven \u015eahin - guvensahin.com\r\nstatic void GVNWebClientTestTLS12(Args _args)\r\n{\r\n    System.Net.WebClient    webClient;\r\n    str                     content;\r\n    ;\r\n\r\n    new InteropPermission(InteropKind::CLRInterop).assert();\r\n\r\n    try\r\n    {\r\n        System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType::Tls12);\r\n        \r\n        webClient   = new System.Net.WebClient();\r\n        content     = @webClient.DownloadString(\"https:\/\/www.incapsula.com\/\");\r\n        \r\n        info(content);\r\n    }\r\n    catch (Exception::CLRError)\r\n    {\r\n        throw error(AifUtil::getClrErrorMessage());\r\n    }\r\n\r\n    CodeAccessPermission::revertAssert();\r\n}\r\n<\/pre>\n
 <\/p>\n
\"\"<\/a><\/p>\n
 <\/p>\n
Sonraki yaz\u0131larda g\u00f6r\u00fc\u015fmek \u00fczere,
\nHo\u015f\u00e7akal\u0131n.<\/p>\n","protected":false},"excerpt":{"rendered":"
Bu yaz\u0131da hem ax 2009 hemde ax 2012 de TLS 1.2 gibi g\u00fcncel g\u00fcvenlik protokol\u00fcn\u00fc destekleyen web servislere nas\u0131l eri\u015febilece\u011fimizden bahsedece\u011fim. Bir sunucu sadece TLS 1.2 destekliyorsa ax i\u00e7inden bir istek g\u00f6nderdi\u011finizde a\u015fa\u011f\u0131daki hata ile kar\u015f\u0131la\u015f\u0131rs\u0131n\u0131z. The underlying connection was closed: An unexpected error occurred on a send. Unable to read data from the transport… Daha fazlas\u0131n\u0131 oku »Dynamics AX 2009\/2012: Sadece TLS 1.2 Destekleyen Web Servislerin Kullan\u0131m\u0131<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1569,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","footnotes":""},"categories":[234],"tags":[432,193,198,415,285],"class_list":["post-1546","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dynamics-ax","tag-net","tag-axapta","tag-dynamics-ax-2","tag-web-service","tag-x"],"_links":{"self":[{"href":"https:\/\/guvensahin.com\/tr\/wp-json\/wp\/v2\/posts\/1546","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/guvensahin.com\/tr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/guvensahin.com\/tr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/guvensahin.com\/tr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/guvensahin.com\/tr\/wp-json\/wp\/v2\/comments?post=1546"}],"version-history":[{"count":17,"href":"https:\/\/guvensahin.com\/tr\/wp-json\/wp\/v2\/posts\/1546\/revisions"}],"predecessor-version":[{"id":1570,"href":"https:\/\/guvensahin.com\/tr\/wp-json\/wp\/v2\/posts\/1546\/revisions\/1570"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/guvensahin.com\/tr\/wp-json\/wp\/v2\/media\/1569"}],"wp:attachment":[{"href":"https:\/\/guvensahin.com\/tr\/wp-json\/wp\/v2\/media?parent=1546"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/guvensahin.com\/tr\/wp-json\/wp\/v2\/categories?post=1546"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/guvensahin.com\/tr\/wp-json\/wp\/v2\/tags?post=1546"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}