Hi All, We have a WPF application built on .Net Framework 4.8. This application acts an HTTPs client. We are currently using the code provided in the attached file for HTTPs communication. This code is used to run a sequence of commands one after another. We are able to see in Wireshark traces that the connection is currently using 'Session Resumption' each time a new command is executed, but we want to renegotiate the connection rather than session resumption. Can anyone let us know as to how this can be done? Any help is appreciated! Thank you in advance! Code used: HttpsConnection.txt

Hi,@ S Abijith . Welcome to Microsoft Q&A. If you want to reconnect every time you send a request, you could try the following method. Method 1: Set request.KeepAlive = false; Related Documents: HttpWebRequest.KeepAlive Property (System.Net) | Microsoft Learn Method 2:Set request.ServicePoint.ConnectionLeaseTimeout = 0; Related Documents: ServicePoint.ConnectionLeaseTimeout Property (System.Net) | Microsoft Learn If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Using Renegotiation in C#

Accepted answer

Hongrui Yu-MSFT 2,865 Reputation points Microsoft Vendor

2024-09-16T06:26:53.7233333+00:00

Hi,@S Abijith. Welcome to Microsoft Q&A.

If you want to reconnect every time you send a request, you could try the following method.

Method 1: Set request.KeepAlive = false;

Related Documents: HttpWebRequest.KeepAlive Property (System.Net) | Microsoft Learn

Method 2:Set request.ServicePoint.ConnectionLeaseTimeout = 0;

Related Documents: ServicePoint.ConnectionLeaseTimeout Property (System.Net) | Microsoft Learn

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
S Abijith 446 Reputation points

2024-09-17T06:05:12.6333333+00:00

Hello @Hongrui Yu-MSFT ,

We tried the code snippet provided by you.

We found that this is creating a new session each time a command is executed. But we do not want this to happen. We do not want to create a new session nor to resume an existing session.

We actually need the connection to use the 'renegotiation_info' as mentioned in the RFC 5746.

Can you please help us on this!!

Hongrui Yu-MSFT 2,865 Reputation points Microsoft Vendor

2024-09-18T08:49:16.0433333+00:00

Hi,@S Abijith.

You could try request.Connection = "Close"; and request.Connection = "Keep-alive";

At present, I have only found sslStream.NegotiateClientCertificateAsync(); which may meet your needs, but sslStream.NegotiateClientCertificateAsync(); could only run in the .Net environment.Does not match your environment.You could refer to the following documents and codes.

Related Documents:

1.SslStream.NegotiateClientCertificateAsync(CancellationToken) Method (System.Net.Security) | Microsoft Learn

2.Breaking change: AllowRenegotiation default is false - .NET | Microsoft Learn

private void Button_Click(object sender, RoutedEventArgs e) { string server = "yourserver.com"; int port = 443; var clientCertificate = new X509Certificate2("path_to_your_certificate.pfx", "your_password"); using (TcpClient client = new TcpClient(server, port)) using (SslStream sslStream = new SslStream(client.GetStream(), false)) { var sslOptions = new SslClientAuthenticationOptions { AllowRenegotiation = true, TargetHost = server, ClientCertificates = new X509CertificateCollection { clientCertificate }, EnabledSslProtocols = System.Security.Authentication.SslProtocols.Tls12 }; sslStream.AuthenticateAsClient(sslOptions); // Send Request SendRequest(sslStream); // Renegotiation sslStream.NegotiateClientCertificateAsync(); // Send the request again SendRequest(sslStream); } } private static void SendRequest(SslStream sslStream) { // Code for sending HTTP request byte[] request = System.Text.Encoding.ASCII.GetBytes("GET / HTTP/1.1\r\nHost: yourserver.com\r\n\r\n"); sslStream.Write(request); sslStream.Flush(); // Read Response byte[] buffer = new byte[2048]; int bytesRead = sslStream.Read(buffer, 0, buffer.Length); Console.WriteLine(System.Text.Encoding.ASCII.GetString(buffer, 0, bytesRead)); }

S Abijith 446 Reputation points

2024-09-23T06:21:46.7233333+00:00

Hello @Hongrui Yu-MSFT ,

Thank you for your response. This helped us in getting insights into 'Renegotiation Info'.

Hongrui Yu-MSFT 2,865 Reputation points Microsoft Vendor

2024-09-23T09:17:47.16+00:00

Hi,@S Abijith.

Glad this was helpful for you.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Using Renegotiation in C#

0 additional answers

Your answer