Solved

Deprecated SSL Protocol Usage, Windows 2003 IIS, how to update ?

Posted on 2010-08-13
4
1,159 Views
Last Modified: 2012-06-27
Port scanner are picking up that we're using Deprecated SSL Protocol Usage.

Windows 2003 Server, ALL MS UPDATES are up to date
IIS6 is web server.

How do I update to new SSL ?
0
Comment
Question by:martinmiller40
  • 2
4 Comments
 
LVL 3

Expert Comment

by:jnbkze
ID: 33435322
go to c:\windows\system32\drivers\etc

open the "services" file with Edit or notepad. go down the list and search for the port for this, and change it to what you want it to be...

just ensure that all clients use the same port in the services file, else it wont be able to communicate.
0
 

Author Comment

by:martinmiller40
ID: 33435430
Does not make sense, can you clarify ?

I understand the services file... how is this relevant to a depreciated SSL protocol ?
0
 
LVL 4

Accepted Solution

by:
Zxeses earned 500 total points
ID: 33436019
I think your previous expert saw "protocol" and interpreted it as "port".  SSL is a port-independent conversation that can happen on any port for any service.

David Wagner of UC Berkeley and Bruce Schneier have put out an excellent papaer on SSL version 3 and why the deprecation of 2.0.  http://www.schneier.com/paper-ssl.pdf

Now to disable SSL 2.0 and others, read and follow http://support.microsoft.com/kb/187498 and take SPECIAL note of the opening paragraph as to upgrading to 2008 IIS 7.0 or newer.

You'll also need to disable older ciphers, http://support.microsoft.com/kb/245030
0
 

Author Comment

by:martinmiller40
ID: 33437593
@ Zxeses

Looks like you NAILED the answer, THANK YOU.  


I am using Windows 2003 and IIS 6, are there any other Need-To-Knows with this combo ?

Thx !

Martin
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question