C#


ROSLYN.SECURITY.CA5361 : Do Not Disable SChannel Use of Strong Crypto (C#)

See Roslyn-Detected C# Warning Classes for more information.

Summary

Starting with the .NET Framework 4.6, the System.Net.ServicePointManager and System.Net.Security.SslStream classes are recommended to use new protocols. The old ones have protocol weaknesses and are not supported. Setting Switch.System.Net.DontEnableSchUseStrongCrypto with true will use the old weak crypto check and opt out of the protocol migration.

This check corresponds to Roslyn rule CA5361. For full rule details, see the Microsoft website: CA5361.

Properties

Class Name Do Not Disable SChannel Use of Strong Crypto (C#)
Significance security
Mnemonic ROSLYN.SECURITY.CA5361
Categories None
Availability Available for C# only.
Enabling Checks for this warning class are disabled by default. To enable them, add the following WARNING_FILTER rule to the project configuration file.
WARNING_FILTER += allow class="Do Not Disable SChannel Use of Strong Crypto (C#)"

Relevant Configuration File Parameters

The following configuration file parameters affect checks for this warning class.