in a driver that use REST API on https (port 443) which version of WinHTTP and SSL/TLS is used by default ?
It will depend on the server configuration and the Windows version on which DataMiner is running.
TLS protocol version support contains a complete overview of the TLS versions per Windows version and Pre-TLS standard protocols support contains the same for SSL versions.
The default versions that need to be used by WinHTTP (taking into account the availability depending on the Windows version) can be completely tweaked through the following registry value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp\DefaultSecureProtocols
On x64-based computers, DefaultSecureProtocols must also be added to the Wow6432Node path.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp\DefaultSecureProtocols
Hereby a list of the values that can be used:
- 0x00000008 (Enable SSL 2.0 by default)
- 0x00000020 (Enable SSL 3.0 by default)
- 0x00000080 (Enable TLS 1.0 by default)
- 0x00000200 (Enable TLS 1.1 by default)
- 0x00000800 (Enable TLS 1.2 by default)
The values can also be combined. Assuming you want to configure TLS 1.1 and TLS 1.2 by default, you can take both values and add them together. In this case that would be 0x00000200 + 0x00000800 = 0x00000A00.
This is then the value that needs to be set to DefaultSecureProtocols registry value.
Source and more information: Update to enable TLS 1.1 and TLS 1.2 as default secure protocols in WinHTTP in Windows