topic Re: Turning off 3DES breaks SSL in Integration and Testing

Turning off 3DES breaks SSL

HD2Pct — Sat, 30 Sep 2017 17:23:56 GMT

Hi-

In my classic ASP application, submission to A.net seemed to grind to halt when they "retired" 3DES. Some on this forum apparently fixed the problem by disabling 3DES. I tried that approach but when I did that, I couldn't access any SSL pages on my site.

Thoughts on this?

Thanks

Dave

Re: Turning off 3DES breaks SSL

NexusSoftware — Sat, 30 Sep 2017 19:02:53 GMT

What version of Windows are you running? How did you disable 3DES?

For 2003 - 2008, check out the post at: https://community.developer.authorize.net/t5/Integration-and-Testing/Underlying-connection-was-closed-an-unexpected-error-occurred-on/m-p/60007#M34576

Re: Turning off 3DES breaks SSL

HD2Pct — Sun, 01 Oct 2017 15:59:49 GMT

@NexusSoftware wrote:
What version of Windows are you running? How did you disable 3DES?

It's Server 2003 R2.

I used IISCrypto, the utility from Nartac software. Figured it was marginally safer than a direct edit of the Registry. I have heard that others have had success with it.

Thoughts?

Re: Turning off 3DES breaks SSL

NexusSoftware — Sun, 01 Oct 2017 16:31:54 GMT

IISCrypto can work pretty well. Do you have a live URL to check out?

There is a lack of support for the SHA2 family of hash algorithms on Windows Server 2003. A potential fix is: https://support.microsoft.com/en-us/help/938397/applications-that-use-the-cryptography-api-cannot-validate-an-x-509-ce

Re: Turning off 3DES breaks SSL

HD2Pct — Mon, 02 Oct 2017 14:00:56 GMT

@NexusSoftware wrote:
IISCrypto can work pretty well. Do you have a live URL to check out?

You mean an SSL page on our site for scanning purposes? Can I PM you?

Again, keep in mind that we never had an issue with A.net until thie 3DES retirement thing,

Re: Turning off 3DES breaks SSL

NexusSoftware — Mon, 02 Oct 2017 14:05:37 GMT

Yes, an SSL page on your site. Not necessarlity for scanning but to inspect and see what might be causing the issue. Yes, you can PM the URL.

Re: Turning off 3DES breaks SSL

HD2Pct — Tue, 03 Oct 2017 23:39:12 GMT

I'm sorry -I feel dumb but I have looked at menus all over this forum and don't see how to send a PM

Re: Turning off 3DES breaks SSL

NexusSoftware — Tue, 03 Oct 2017 23:43:24 GMT

If you click on a user's profile, there is a link "Send this user a private message".