none
WinHttp TLS1.2 for Excel & Power Query RRS feed

  • Question

  • Hi

    I'm using Excel to push data through a web service API.

    The service provider is changing to TLS shortly.

    I notice that WinHttp (in VBA) only handles TLS1.0 which is insecure.  I did try an undocumented setting (SecureProtocols = 2056) to try and get TLS1.2 but this doesn't work.

    Power Query is also using TLS1.0 which I think is an even bigger security problem as many people using it won't realise the security problems.

    url2="https://www.howsmyssl.com/a/check"
    
    Set WHTTP = CreateObject("WinHTTP.WinHTTPrequest.5.1")
    WHTTP.Open "POST", url2, False
    WHTTP.setRequestHeader "Content-Type", "application/xml;charset=UTF-8"
    'WHTTP.Option WinHttpRequestOption_SecureProtocols = 2056
    WHTTP.send
    
    mess = WHTTP.responseText

    Are there any workarounds to this problem or are Microsoft ever going to update their client tools?  It's for reasons like this what I'm moving my analytical models from Office to R where I find support for libraries. 

    Lee


    Lee Hawthorn ACMA, CGMA View my Performance Management blog at leehbi.com

    Tuesday, March 17, 2015 1:55 PM

Answers

  • Hi,

    This forum is mainly for discussing questions about Excel Development(Exce Automation),for TLS security questions in Power Query, I will suggest you posting this question on Power query forum.

    Power Pivot forum: https://social.technet.microsoft.com/Forums/en-US/home?forum=powerquery 

     >> I did try an undocumented setting (SecureProtocols = 2056) to try and get TLS1.2 but this doesn't work.

    About how to use TLS in VBA, I will suggest you posting this issue in VBA forum.

    VBA forum : https://social.msdn.microsoft.com/Forums/en-US/home?forum=isvvba

    Thanks for your understanding.

    Best Regards

    Lan


    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click HERE to participate the survey.

    • Proposed as answer by L.HlModerator Friday, March 27, 2015 7:49 AM
    • Marked as answer by L.HlModerator Sunday, March 29, 2015 3:26 PM
    Friday, March 20, 2015 10:43 AM
    Moderator

All replies

  • I do think  Power Query forum is the right place for this thread for the security problem
    Thursday, March 19, 2015 3:13 PM
  • Hi,

    This forum is mainly for discussing questions about Excel Development(Exce Automation),for TLS security questions in Power Query, I will suggest you posting this question on Power query forum.

    Power Pivot forum: https://social.technet.microsoft.com/Forums/en-US/home?forum=powerquery 

     >> I did try an undocumented setting (SecureProtocols = 2056) to try and get TLS1.2 but this doesn't work.

    About how to use TLS in VBA, I will suggest you posting this issue in VBA forum.

    VBA forum : https://social.msdn.microsoft.com/Forums/en-US/home?forum=isvvba

    Thanks for your understanding.

    Best Regards

    Lan


    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click HERE to participate the survey.

    • Proposed as answer by L.HlModerator Friday, March 27, 2015 7:49 AM
    • Marked as answer by L.HlModerator Sunday, March 29, 2015 3:26 PM
    Friday, March 20, 2015 10:43 AM
    Moderator