Level Extreme platform
Subscription
Corporate profile
Products & Services
Support
Legal
Français
Disabling SSLv2
Message
From
27/02/2014 14:43:45
 
 
To
All
General information
Forum:
Microsoft IIS Server
Category:
Other
Title:
Disabling SSLv2
Miscellaneous
Thread ID:
01595485
Message ID:
01595485
Views:
32
On several servers, running IIS 6 or IIS 7.5, from Windows Server 2003 or Windows Server 2008, when I view a certificate, I can see that I have warning signs on "Key Usage" and "Basic Constraints". When I had that verified by the certificate authority, they said they detected that SSLv2 was in effect and this could cause such reaction. To disable SSLv2, it was recommended to go in the Registry in the System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0 and add a key Enabled with value 0. Then a reboot was necessary. After the reboot, this does not change anything.

Would there by anyone who would know how to resolve those two warning signs? Also, if you check some of your certificates, are you having those warning signs?

This support has been upscaled to SSLv3 since IE5. So, it has been a very long time that all major browers support SSLv3. SSLv2 has been known to have security issues. Some, there is a potential intrusion in there. This is why many are disabling SSLv2 at the server level.
Michel Fournier
Level Extreme Inc.
Designer, architect, owner of the Level Extreme Platform
Subscribe to the site at https://www.levelextreme.com/Home/DataEntry?Activator=55&NoStore=303
Subscription benefits https://www.levelextreme.com/Home/ViewPage?Activator=7&ID=52
Reply
Map
View

Click here to load this message in the networking platform