i looked around a lot of similar question but none of this fixing my issue. We are upgrading to TLS 1.2 and am getting the below error which i got from Windows event log
An TLS 1.2 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server.
lantronix xport pro(Supporting TLS 1.2) Device making a call to the .net service deployed in Windows server 2012.
Client/Server Handshake is failing but am not able to figure out why. issue happens in the below line
stream.AuthenticateAsServer(_serverCertificate, false, SslProtocols.Ssl3| SslProtocols.Tls | SslProtocols.Tls11 | SslProtocols.Tls12, true);
Used Wireshark and Windows server 2012 R2 have only TLs 1.1 and 1.2 enabled using IIS Crypto
Client send TLS 1.2 Request with below Cipher suites
Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA (0x002f)
Cipher Suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a)
Cipher Suite: TLS_RSA_EXPORT1024_WITH_RC4_56_MD5 (0x0060)
Cipher Suite: TLS_RSA_EXPORT1024_WITH_RC4_56_SHA (0x0064)
Cipher Suite: TLS_RSA_EXPORT_WITH_RC4_40_MD5 (0x0003)
But server doesnt respond with Server Hello and finding the error message that none of the cipher supported by server.
I can see in IIS Crypto that AES_128_CBC_SHA in the crypto. But am not sure why it failing and almost stuck for days. Hope to get some clarity on what i can do further to troubleshoot this
Update::
I created a Client from Windows server 2012 and it is connected to the server and it is connecting TLS 1.2 with Cipher Suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)
But when connecting lantronix xport pro(Supporting TLS 1.2) server says 'The client and server cannot communicate, because they do not possess a common algorithm' on both X86 and x64.
Does it mean 2012 server does not support any of this ciphers sent by client
Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA (0x002f) Cipher Suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a) Cipher Suite: TLS_RSA_EXPORT1024_WITH_RC4_56_MD5 (0x0060) Cipher Suite: TLS_RSA_EXPORT1024_WITH_RC4_56_SHA (0x0064) Cipher Suite: TLS_RSA_EXPORT_WITH_RC4_40_MD5 (0x0003)
Server creating TCL SSLStream and not using IIS
Any suggestion for this would be great
Thanks