C#


ROSLYN.SECURITY.CA5398 : Avoid hardcoded SslProtocols values (C#)

See Roslyn-Detected C# Warning Classes for more information.

Summary

Current Transport Layer Security protocol versions may become deprecated if vulnerabilities are found. Avoid hardcoding SslProtocols values to keep your application secure. Use 'None' to let the Operating System choose a version.

This check corresponds to Roslyn rule CA5398. For full rule details, see the Microsoft website: CA5398.

Properties

Class Name Avoid hardcoded SslProtocols values (C#)
Significance security
Mnemonic ROSLYN.SECURITY.CA5398
Categories None
Availability Available for C# only.
Enabling Checks for this warning class are disabled by default. To enable them, add the following WARNING_FILTER rule to the project configuration file.
WARNING_FILTER += allow class="Avoid hardcoded SslProtocols values (C#)"

Relevant Configuration File Parameters

The following configuration file parameters affect checks for this warning class.