We have an application that we are trying to get to communicate to Paypal. We noticed that communication failures were occurring, so we routed everything through Charles as a proxy. When we routed the application through Charles, the application worked. I investigated the network traffic and it appears that Charles will initiate the SSL communication channel over TLS 1.2.
When Charles was not being the proxy, the application tries to use TLS 1.0 and it fails at the Client Hello message.
I decided to disable TLS 1.0 on the server by disabling it in IE and changing the TLS 1.0 registry keys DisabledByDefault = 0 and Enabled = 0. When I do this and reboot the server and run the application, I see communication to the Paypal servers, but no client handshake and the application fails.
So I'm at a loss as to why the Client Hello message would be sent with TLS 1.0 and the TLS 1.1 and 1.2 won't send the hello message. I've tried both '1' and 'ffffffff' as the Enabled key and neither seem to work. Any trick to disabling 1.0 and getting 1.1 / 1.2 working?