Invoke-WebRequest causes SSL/TLS error

[olaeld]

Upon installing the extension and running it, I get the following error:

Downloading Dependency Check vulnerability data... ##[error]System.Net.WebException: The request was aborted: Could not create SSL/TLS secure channel. at Microsoft.PowerShell.Commands.WebRequestPSCmdlet.GetResponse(WebRequest request) at Microsoft.PowerShell.Commands.WebRequestPSCmdlet.ProcessRecord() Ending Dependency Check...

[ejohn20]

I've seen this before in PS using invoke web request when there is a policy preventing non-TLS1.2 connections. I'm guessing that this needs to be added to the script:

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

[ejohn20]

I've only used this task on the Hosted 2017 agents, can you confirm that it works on that one? I'll try to reproduce when i have a minute.

[olaeld]

Thanks, for getting back on this topic! Unfortunately, because of the setup of the project, I cannot easily test this on a Hosted 2017 agent.

[ejohn20]

@olaeld I'm having trouble re-producing this issue. Would you be willing to install the development version of the extension in your organization and test a patch for me? If so, you can DM me your organization name and I can share it with you.