Force new TLS version for REST

doc/31-Changelog.md

@@ -16,6 +16,8 @@ Released closed milestones can be found on [GitHub](https://github.com/Icinga/ic
 * [#229](https://github.com/Icinga/icinga-powershell-framework/pull/229) CustomFields defined as `SecureString` are now set to `hidden` within the Icinga Director configuration basket - please read the [upgrading docs](30-upgrading-framework.md) carefully
 * [#234](https://github.com/Icinga/icinga-powershell-framework/pull/234) Adds support to allow custom exception lists for Icinga Exceptions, making it easier for different modules to ship their own exception messages
 * [#235](https://github.com/Icinga/icinga-powershell-framework/pull/235) Adds new Cmdlet `Show-IcingaEventLogAnalysis` to get a better overview on how many log entries are present within the EventLog based on hour, minute and day average/maximum for allowing a more dynamic configuration for `Invoke-IcingaCheckEventLog`
+* [#241](https://github.com/Icinga/icinga-powershell-framework/pull/241) Ensures we use TLS 1.1 and 1.2 for REST-Api calls, as used certificates in general are created with these
+
 
 ### Bugfixes
 

icinga-powershell-framework.psd1

@@ -24,6 +24,7 @@
         '.\lib\icinga\plugin\Exit-IcingaExecutePlugin.psm1',
         '.\lib\icinga\exception\Exit-IcingaPluginNotInstalled.psm1',
         '.\lib\icinga\exception\Exit-IcingaThrowException.psm1',
+        '.\lib\web\Set-IcingaTLSVersion.psm1',
         '.\lib\web\Disable-IcingaProgressPreference.psm1',
         '.\lib\core\tools\New-IcingaNewLine.psm1',
         '.\lib\core\logging\Write-IcingaConsolePlain.psm1',
@@ -63,6 +64,7 @@
         'Exit-IcingaExecutePlugin',
         'Exit-IcingaPluginNotInstalled',
         'Exit-IcingaThrowException',
+        'Set-IcingaTLSVersion',
         'Disable-IcingaProgressPreference',
         'New-IcingaNewLine',
         'Write-IcingaConsolePlain',

lib/core/framework/Invoke-IcingaInternalServiceCall.psm1

@@ -50,6 +50,7 @@ function Invoke-IcingaInternalServiceCall()
         $Timeout = $Daemon['Timeout'];
     }
 
+    Set-IcingaTLSVersion;
     Enable-IcingaUntrustedCertificateValidation -SuppressMessages;
 
     [hashtable]$CommandArguments = @{ };