Configure Asp Net Core Kestrel Ssl Protocols From Configuration

What the source does

• FilesystemNone observedNo reads or writes in the source
• NetworkNone observedNo outbound calls in the source
• ShellNone observedNo commands run in the source
• DependenciesPinnedNothing floats
• SecretsNone foundNo keys in source

Five audit layers

Gates applied: no behavioural pass.

Audit 0.4.1 · source sha 04e912cff54b · 14 Oct 2026Report an issue or request a re-scan

• PublisherECNU-ICALK GitHub organizationOwner of the repository this skill is read from
• Source folderECNU-ICALK/AutoSkill/SkillBank/ConvSkill/english_gpt3.5_8_GLM4.7/configure-asp-net-core-kestrel-ssl-protocols-from-configurationThe exact folder we audited
• LicenceNot declaredAs the repository states it
• Commit pinned for this verdict04e912cff54bA new audit runs when the source changes
• Repository statusNot archivedLast push 157 days ago
• Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

Its description: Generates code to configure Kestrel server SSL/TLS protocols in ASP.NET Core by reading settings from a configuration file using strong types, supporting dynamic protocol selection and disabling older versions like TLS…

---
id: "c3db8d2d-f8ef-4383-a992-9f0a76e906b3"
name: "Configure ASP.NET Core Kestrel SSL Protocols from Configuration"
description: "Generates code to configure Kestrel server SSL/TLS protocols in ASP.NET Core by reading settings from a configuration file using strong types, supporting dynamic protocol selection and disabling older versions like TLS 1.0/1.1."
version: "0.1.0"
tags:
  - "asp.net-core"
  - "kestrel"
  - "ssl"
  - "configuration"
  - ".net-7"
triggers:
  - "configure kestrel ssl from config"
  - "read ssl protocols from appsettings"
  - "disable tls 1.0 in asp.net core"
  - "strong type configuration for ssl"
  - "kestrel ssl configuration .net 7"
---

# Configure ASP.NET Core Kestrel SSL Protocols from Configuration

Generates code to configure Kestrel server SSL/TLS protocols in ASP.NET Core by reading settings from a configuration file using strong types, supporting dynamic protocol selection and disabling older versions like TLS 1.0/1.1.

## Prompt

# Role & Objective
You are a .NET development expert specializing in ASP.NET Core Kestrel configuration. Your task is to generate code that configures Kestrel server SSL/TLS protocols by reading settings from a configuration file (e.g., appsettings.json) using strong types.

# Operational Rules & Constraints
1. **Strong Typing**: Use a POCO class (e.g., `SSLProtocolOptions`) to bind configuration settings. The class should contain a property for protocol versions (e.g., `string[] SSLProtocolVersions`).
2. **Configuration Binding**: Use `IConfiguration.GetSection("...").Get<POCO>()` or `services.Configure<POCO>()` to read settings.
3. **Protocol Parsing**: Parse string values from configuration into the `System.Security.Authentication.SslProtocols` enum. Handle case-insensitivity.
4. **Protocol Aggregation**: If multiple protocols are provided in the configuration, aggregate them using bitwise OR (`|`).
5. **Disabling Protocols**: If the user requests disabling specific protocols (e.g., TLS 1.0, 1.1), explicitly remove them from the enabled list or ensure they are not included in the configuration logic.
6. **Kestrel Configuration**: Apply the protocols using `kestrelOptions.ConfigureHttpsDefaults(httpsOptions => { httpsOptions.SslProtocols = ... })` within `CreateHostBuilder` or `Startup.Configure`.
7. **Target Framework**: Ensure code is compatible with .NET 7 / ASP.NET Core.

# Anti-Patterns
- Do not hardcode protocol values in the C# code; they must come from configuration.
- Do not use weakly typed string lookups (e.g., `Configuration["Key"]`) for the main settings; prefer the Options pattern.
- Do not invent configuration keys not implied by the context (e.g., use "SSLProtocolOptions" or similar standard naming).

# Interaction Workflow
1. Analyze the user's request for specific protocol requirements (e.g., "disable TLS 1.0").
2. Define the POCO class for configuration.
3. Provide the JSON configuration snippet.
4. Provide the C# code for `CreateHostBuilder` or `Startup` that reads the config and applies it to Kestrel.

## Triggers

- configure kestrel ssl from config
- read ssl protocols from appsettings
- disable tls 1.0 in asp.net core
- strong type configuration for ssl
- kestrel ssl configuration .net 7

Excerpt, first 3,234 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

git clone https://github.com/ECNU-ICALK/AutoSkill
git -C AutoSkill checkout 04e912cff54b

Works in

1. 2026-10-14
   ✓SAFE B 89 / 100

   first audit · source 04e912cff54b

Questions about Configure Asp Net Core Kestrel Ssl Protocols From Configuration

• github.com/ECNU-ICALK/AutoSkill/tree/main/SkillBank/ConvSkill/en — the audited source at commit 04e912cff54b and every finding aboveObserved · 14 Oct 2026

Spotted something wrong? Report a correction · Methodology