Re: Allowing SSL3 and only SSL3

I have not tried this myself but see the link below to the KB article that
may be of help on how to disable such protocols. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;187498

Microsoft Windows NT Server stores information about different
security-enhanced channel protocols that Windows NT Server supports. This
information is stored in the following registry key:

HKey_Local_Machine\System\CurrentControlSet\Control\SecurityProviders
\SCHANNEL\Protocols

Typically, this key contains the following subkeys: . PCT 1.0
. SSL 2.0
. SSL 3.0
. TLS 1.0
Each key holds information about the protocol for the key. Any one of these
protocols can be disabled at the server. To do this, you create a new DWORD
value in the server subkey of the protocol. You set the DWORD value to "00
00 00 00."

Note By default, PCT is not enabled on Microsoft Windows Server 2003.



"Jon" <Jon@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2851BC0F-7DE4-4830-B9BA-AFDCCF72C57C@xxxxxxxxxxxxxxxx
> Hi all, I recently installed a v3 verisign certificate on my windows 2000
> Server. I am attempting to limit connections to my website strictly to
> SSL3
> 128 bit encryption. The SSL3 connection does work, however if I test by
> either lowering my internet options in IE to disable SSL3 and only enable
> SSL2, or test with OpenSSL, I can still successfully make an SSL2
> connection.
>
> I'd like to protect my end users. Can I set the server to only make SSL3
> connections?
>
> Thanks!


.

Relevant Pages

  • Re: threads and system calls
    ... this application clients connect to the server via ssl and a simple ... turn makes https connections to yet another server, gets the response, ... can easily handle multiple protocols and isn't very hard ...
    (comp.lang.ruby)
  • Re: Need Feedback on Trans. Replication w/ Remote Distributor
    ... Built-in log shipping works over SMB protocols. ... BOL describes the built-in stuff for Log Shipping in Enterprise ... The SQL 2000 resource kit has some more information on roll your ... Microsoft SQL Server MVP ...
    (microsoft.public.sqlserver.replication)
  • Re: Socket Server with Encryption help
    ... Authentication protocols are fiercely difficult to get right. ... "Practical Cryptography" book, that was suggested to you earlier, could be ... Client connects into Server and Server accepts the connection. ...
    (microsoft.public.dotnet.security)
  • Re: Socket Server with Encryption help
    ... Before the client ... Authentication protocols are fiercely difficult to get right. ... by Needham and Schroeder "Using encryption for authentication in large ... Client connects into Server and Server accepts the connection. ...
    (microsoft.public.dotnet.security)
  • Re: Capturing Windows Login Name
    ... annoyance of typing their user names and passwords again. ... that among other protocols supports NTLM. ... server in the last step, ... a site under the same Windows controller domain, ...
    (comp.lang.php)