Windows 10 1909 启用 TLS 1.3 后出现的问题

asked 2020-08-28T03:12:23.803+00:00
LC 1 Reputation point

Windows 10 1909 企业版(内部版本:18363.1016)在 Internet 选项中启用 TLS 1.3(实验性)功能并在注册表中做如下设置:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client]
"Enabled"=dword:00000001
"DisabledByDefault"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001

并重启后访问此计算机上搭建的网站在 MySSL 上检测得出可以使用 TLS 1.3 ,但使用浏览器访问时会出现 ERR_SSL_PROTOCOL_ERROR 的情况,Edge 85.0.564.41 、Chrome 85.0.4183.83、Firefox Developer Edition 81.0b3 x86 都是如此,若将 DisabledByDefault 删除,能够正常访问,但检测发现 TLS 1.3 无法使用。

但是在 Windows 10 20H2 企业版(内部版本:19042.450,体验:Windows Feature Experience Pack 120.2212.31.0)上做同样的设置(Internet 选项中启用以及在注册表中设置四个DWORD值)后无论使用浏览器还是 MySSL 检测,都能够使用 TLS 1.3 正常访问,且浏览器访问不会出现 ERR_SSL_PROTOCOL_ERROR 的情况。

Not Monitored
Not Monitored
Tag not monitored by Microsoft.
23,667 questions
No comments
{count} votes

1 answer

Sort by: Most helpful
  1. answered 2020-08-28T05:48:27.827+00:00
    Gloria Gu 3,816 Reputation points

    Hi,

    Currently in Microsoft Q&A we only support English, you may reply us in English and we can continue this thread discussing. If you need Chinese language support, please post on TechNet forum in Chinese:
    https://social.technet.microsoft.com/Forums/en-us/home

    Thanks for your understanding.

    -------If my answer is helpful to you, please remember to mark them as answer. Thank you!------

    Regards
    Gloria

    No comments