Hi,
I'm getting totaly crazy. I try to disable the SSL 3.0 on IIS 8 (or 8.5? how toget the right version?). Following steps i did:
Disable it manually in registry like here:
- https://www.sslshopper.com/article-how-to-disable-ssl-2.0-in-iis-7.html
disable it with powershell like here:
- https://www.hass.de/content/setup-your-iis-ssl-perfect-forward-secrecy-and-tls-12
disable it via IIS Crypto tool:
- https://www.nartac.com/Products/IISCrypto
I tryed this solutions many times and i restarted server after every change and tested with the following sites if SSL 3.0 is dissabled.
- https://www.poodlescan.com/ and https://www.ssllabs.com/ssltest/
both websites always show me that ssl 3 is still activated... i have aboslutly no idea anymore what im doing wrong.
I searched the whole day in the half inet and finaly i found here a post (http://forums.iis.net/t/1221916.aspx?Disabling+sslv3+in+2012+r2+iis+8+5+doesn+t+work) where
somone had the same problem. Somone wrote that he deleted the whole SSL keys in Registry and recreated them. I tryed this too but it not helps. :(
Somone has an idea whats going on with my windows server 2012? There is also a website running on my server using wordpress, xamp, apache http server, mysql stuff.. could it be that something of this hold the SSL 3 somehow enabled?
Sry for my bad english :S
Edit: For testing if i can enable SSL 2.0 (by default its dissabled) i enabled it in registry (set the DWORD "Enabled" = 1). Absolutly nothing. The both websites for testing SSL still show me that SSL 2.0 is dissabled!! WTF!? Seems i can write into registry what i want.. Windows server 2012 absolutly dont care about it O_o