Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 1881

Can't disable SSL 3.0 on IIS 8 (Windows Server 2012)! Tested many ways

$
0
0

Hi, 

I'm getting totaly crazy. I try to disable the SSL 3.0 on IIS 8 (or 8.5? how toget the right version?).  Following steps i did:

Disable it manually in registry like here:

https://www.sslshopper.com/article-how-to-disable-ssl-2.0-in-iis-7.html

disable it with powershell like here:

 - https://www.hass.de/content/setup-your-iis-ssl-perfect-forward-secrecy-and-tls-12

disable it via IIS Crypto tool:

https://www.nartac.com/Products/IISCrypto

I tryed this solutions many times and i restarted server after every change and tested with the following sites if SSL 3.0 is dissabled. 

https://www.poodlescan.com/ and https://www.ssllabs.com/ssltest/

both websites always show me that ssl 3 is still activated... Cry i have aboslutly no idea anymore what im doing wrong. I searched the whole day in the half inet and finaly i found here a post (http://forums.iis.net/t/1221916.aspx?Disabling+sslv3+in+2012+r2+iis+8+5+doesn+t+work) where somone had the same problem. Somone wrote that he deleted the whole SSL keys in Registry and recreated them. I tryed this too but it not helps. :(

Somone has an idea whats going on with my windows server 2012? There is also a website running on my server using wordpress, xamp, apache http server, mysql stuff.. could it be that something of this hold the SSL 3 somehow enabled?

Sry for my bad english :S

Edit: For testing if i can enable SSL 2.0 (by default its dissabled) i enabled it in registry (set the DWORD "Enabled" = 1). Absolutly nothing. The both websites for testing SSL still show me that SSL 2.0 is dissabled!! WTF!? Seems i can write into registry what i want.. Windows server 2012 absolutly dont care about it O_o


Viewing all articles
Browse latest Browse all 1881

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>