Re: Schanner secu

2014-11-23 Thread Gilles Vollant
Where can we found the RFC about this cipher ? This blog page contain information about cipher order in Windows and the bug http://blog.ittoby.com/2014/11/microsoft-kb-2992611-winshock-more.html 2014-11-19 10:16 GMT+01:00 Mounir IDRASSI mounir.idra...@idrix.net: Hi, The latest Windows

Re: Schanner secu

2014-11-20 Thread Jakob Bohm
On 19/11/2014 22:37, Gilles Vollant wrote: On https://support.microsoft.com/kb/2992611 we can read Some customers have reported an issue that is related to the changes in this release. These changes added the following new cipher suites to Windows Server 2008 R2 and Windows Server 2012. In

Re: Schanner secu

2014-11-19 Thread Mounir IDRASSI
Hi, The latest Windows update that corrected the WinShock SChannel vulnerability brought many changes to the way TLS is performed and among the changes is the fact that the Supported Point Formats Extension is not sent anymore in the ServerHello during the TLS handshake. In version of

Re: Schanner secu

2014-11-19 Thread Gilles Vollant
Microsoft published today a new version of the KB 2992611 on the first patch, they modified the registry entry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CryptographyBeforce\Configuration\Local\SSL\00010002 , entry Functions original list, before 11 november, and after 19 november

Re: Schanner secu

2014-11-19 Thread Gilles Vollant
On https://support.microsoft.com/kb/2992611 we can read Some customers have reported an issue that is related to the changes in this release. These changes added the following new cipher suites to Windows Server 2008 R2 and Windows Server 2012. In order to give customers more control over whether

Schanner secu

2014-11-14 Thread Gilles Vollant
Microsoft just published a patch on their SChannel component (KB 2992611 ) https://technet.microsoft.com/library/security/MS14-066 But with this fix, Web server IIS 7.5/8.0 on Windows server 2008R2 or Windows server 2012 did not accept download from curl + OpenSSL 1.0.0a / 1.0.0b ! If you