Add Chiper Suite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 for Window 2012 R12

QianBiao NG 31

Hello,

I install a service in window 2012 R12, and this service will access our backend service protected by SSL. Unfortunatelly, for some security reason, this backend service only support ssl chiper suite:

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

But it seems window server 2012 R2 does not support those chiper suite, any way to add them?

QianBiao NG 31 Reputation points

2020-12-26T14:16:29.103+00:00

@Dave Patrick give a method to set chiper suite through a tool, anyone knows how the tool set the chiper suite? May i set it through command line ?

Accepted answer

Dave Patrick 426.1K Reputation points MVP

2020-12-15T14:26:38.143+00:00

You can follow along here.
https://www.howtogeek.com/221080/how-to-update-your-windows-server-cipher-suite-for-better-security/

--please don't forget to Accept as answer if the reply is helpful--
Please sign in to rate this answer.

1 person found this answer helpful.
Qianbiao NG 1 Reputation point

2020-12-26T13:17:42.13+00:00

Sorry being late, It seems the solution has none effect. After adding those chiper suite, the error still occurs when using System.Net.HttpClient to access REST API.

Qianbiao NG 1 Reputation point

2020-12-26T14:06:44.95+00:00

oh, it needs a reboot to take effect. And finally, it works. Thanks.

And another question, is there a method to set chiper suite through command line? or programic way. We need to add it the installation script.

Dave Patrick 426.1K Reputation points MVP

2020-12-26T14:09:51.63+00:00

You're welcome, glad to hear it helps.

--please don't forget to Accept as answer if the reply is helpful--

Qianbiao NG 1 Reputation point

2020-12-26T14:12:30.97+00:00

did not see the accept button. where is it.

And, is there a method to set chiper suite through command line or programic way. We need to add it the installation script.

QianBiao NG 31 Reputation points

2020-12-26T14:14:58.57+00:00

aha, I am login with a wrong account, so accept button is not shown.
Sign in to comment

Add Chiper Suite TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 for Window 2012 R12

1 additional answer