微信小程序  TLS 版本必须大于等于1.2问题解决

此问题最近在微信小程序开发中，比较常见。

在解决这个问题之前，我们需要了解一下，当前的系统环境是否支持TLS1.2以上，可以参考一下表格：

请先确认系统支持TLS1.2以后，进行一下操作：（如不支持请升级系统到支持版本）

windows2008R2在配置SSL做小程序开发时候提示小程序的TLS版本必须大于等于1.2。

解决方法：

请先备份导出HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocols的值。如图：

将以下代码，保存到一个txt文件，然后修改后缀.reg，双击执行即可，完成这一步后，重启服务器。

1. Windows Registry Editor Version 5.00

2.  

3. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocols]

4.  

5. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsMulti-Protocol Unified Hello]

6.  

7. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsMulti-Protocol Unified HelloClient]

8. "Enabled"=dword:00000000

9. "DisabledByDefault"=dword:00000001

10.  

11. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsMulti-Protocol Unified HelloServer]

12. "Enabled"=dword:00000000

13. "DisabledByDefault"=dword:00000001

14.  

15. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsPCT 1.0]

16.  

17. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsPCT 1.0Client]

18. "Enabled"=dword:00000000

19. "DisabledByDefault"=dword:00000001

20.  

21. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsPCT 1.0Server]

22. "Enabled"=dword:00000000

23. "DisabledByDefault"=dword:00000001

24.  

25. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsSSL 2.0]

26.  

27. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsSSL 2.0Client]

28. "DisabledByDefault"=dword:00000001

29. "Enabled"=dword:00000000

30.  

31. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsSSL 2.0Server]

32. "Enabled"=dword:00000000

33. "DisabledByDefault"=dword:00000001

34.  

35. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsSSL 3.0]

36.  

37. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsSSL 3.0Client]

38. "Enabled"=dword:00000000

39. "DisabledByDefault"=dword:00000001

40.  

41. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsSSL 3.0Server]

42. "Enabled"=dword:00000000

43. "DisabledByDefault"=dword:00000001

44.  

45. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsTLS 1.0]

46.  

47. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsTLS 1.0Client]

48. "Enabled"=dword:00000001

49. "DisabledByDefault"=dword:00000000

50.  

51. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsTLS 1.0Server]

52. "Enabled"=dword:00000001

53. "DisabledByDefault"=dword:00000000

54.  

55. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsTLS 1.1]

56.  

57. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsTLS 1.1Client]

58. "DisabledByDefault"=dword:00000000

59. "Enabled"=dword:00000001

60.  

61. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsTLS 1.1Server]

62. "DisabledByDefault"=dword:00000000

63. "Enabled"=dword:00000001

64.  

65. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsTLS 1.2]

66.  

67. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsTLS 1.2Client]

68. "DisabledByDefault"=dword:00000000

69. "Enabled"=dword:00000001

70.  

71. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsTLS 1.2Server]

72. "Enabled"=dword:00000001

73. "DisabledByDefault"=dword:00000000

http://www.landui.com/help/show-6155.html

下面网址用来检查tls问题

https://www.ssllabs.com/ssltest/analyze.html



参考网址：

http://blog.csdn.net/sinat_29384657/article/details/76176923

安卓真机调试request:fail ssl hand shake error 报错，苹果没有问题。

http://blog.csdn.net/qq_27626333/article/details/53635564