Reply
Highlighted
Member
Posts: 4
Registered: ‎09-22-2017

Turning off 3DES breaks SSL

Hi-

 

In my classic ASP application, submission to A.net seemed to grind to halt when they "retired" 3DES. Some on this forum apparently fixed the problem by disabling 3DES. I tried that approach but when I did that, I couldn't access any SSL pages on my site.

 

Thoughts on this?

 

Thanks

Dave

Posts: 416
Topics: 0
Kudos: 85
Blog Posts: 0
Ideas: 0
Solutions: 32
Registered: ‎04-28-2017

Re: Turning off 3DES breaks SSL

What version of Windows are you running? How did you disable 3DES?

 

For 2003 - 2008, check out the post at: https://community.developer.authorize.net/t5/Integration-and-Testing/Underlying-connection-was-close...

Powered by NexWebSites.com -
Certified Authorize.net developers
Member
Posts: 4
Registered: ‎09-22-2017

Re: Turning off 3DES breaks SSL


NexusSoftware wrote:

What version of Windows are you running? How did you disable 3DES?

 

 



It's Server 2003 R2.

 

I used IISCrypto, the utility from Nartac software. Figured it was marginally safer than a direct edit of the Registry. I have heard that others have had success with it.

 

Thoughts?

Posts: 416
Topics: 0
Kudos: 85
Blog Posts: 0
Ideas: 0
Solutions: 32
Registered: ‎04-28-2017

Re: Turning off 3DES breaks SSL

[ Edited ]

IISCrypto can work pretty well. Do you have a live URL to check out?

 

There is a lack of support for the SHA2 family of hash algorithms on Windows Server 2003. A potential fix is: https://support.microsoft.com/en-us/help/938397/applications-that-use-the-cryptography-api-cannot-va...

Powered by NexWebSites.com -
Certified Authorize.net developers
Member
Posts: 4
Registered: ‎09-22-2017

Re: Turning off 3DES breaks SSL


NexusSoftware wrote:

IISCrypto can work pretty well. Do you have a live URL to check out?

 

 



You mean an SSL page on our site for scanning purposes? Can I PM you?

 

Again, keep in mind that we never had an issue with A.net until thie 3DES retirement thing,

 

Posts: 416
Topics: 0
Kudos: 85
Blog Posts: 0
Ideas: 0
Solutions: 32
Registered: ‎04-28-2017

Re: Turning off 3DES breaks SSL

Yes, an SSL page on your site. Not necessarlity for scanning but to inspect and see what might be causing the issue. Yes, you can PM the URL.

 

 

Powered by NexWebSites.com -
Certified Authorize.net developers
Member
Posts: 4
Registered: ‎09-22-2017

Re: Turning off 3DES breaks SSL

I'm sorry -I feel dumb but I have looked at menus all over this forum and don't see how to send a PM

Posts: 416
Topics: 0
Kudos: 85
Blog Posts: 0
Ideas: 0
Solutions: 32
Registered: ‎04-28-2017

Re: Turning off 3DES breaks SSL

[ Edited ]

If you click on a user's profile, there is a link "Send this user a private message".

Powered by NexWebSites.com -
Certified Authorize.net developers