Adding to the response above, you can test it from a remote linux box.
the command for sslv2 is
openssl s_client -connect yourserver.com:443 -ssl2
If that succeeds, you have v2 enabled.
the command for sslv3 is
openssl s_client -connect yourserver.com:443 -ssl3
If that succeeds, you have v3 enabled.
HTH
Main Topics
Browse All Topics





by: Dave_DietzPosted on 2005-02-10 at 13:09:53ID: 13280124
IIS will negotiate an SSL version and cipher suite with the client - it isn't one version or another that IIS supports.
CurrentCon trolSet\Co ntrol\Secu rityProvid ers\SCHANN EL at the Ciphers and Protocols keys to see what is there.
IIS supports SSL2.0, SSL3.0, PCT1.0 and TLS1.0 by default with various DES, RC2, RC4, Skipjack and Triple DES cipher suites.
You can look under HKEY_LOCAL_MACHINE\SYSTEM\
If a given cipher or protocol has an ENABLED value of 0 that item will not be used. If it is not 0 it will be used, although they may be used in specific combinations i.e. not all protocols use all cipher suites.
Dave Dietz