Saturday, May 30, 2015

Windows 2003 Server can't connect to any SSL sites.

Unfortunately we have some programs that require Windows Server 2003. While I hate having old deprecated servers n my environment, sometimes thats the way it has to be.

This particular server is only used for one program and I don't usually have a need to log in or "fiddle" with it. A month ago I have to refresh the server and reinstall the program.

During the install I noticed that I wasn't able to go to any SSL sites. After some research this is because Windows 2003 has no support for SHA2 certs. I eventually found a hotfix.

The hotfix is 315139_ENU_i386_zip.exe.

Unfortunately I can't find the KB article that let's you download this file. I found it from a forum post and I cant find that post anywhere.

The closest site i can find is this: https://support.microsoft.com/en-us/kb/968730.

Unfortunately it only gives the 64 bit version of the fix. The one i went to gave me a choice. Since i have Windows 2003 32 bit I was able to select i386 version.

If i find it i will update this post.

2 comments:

  1. it's this one
    https://support.microsoft.com/en-us/kb/938397
    according to MS policy, there's no direct download link, but you request it by giving them your email and recieve the download link there.
    You can read about it here: http://blogs.technet.com/b/pki/archive/2010/09/30/sha2-and-windows.aspx

    ReplyDelete
  2. Excellent. Thank you Isnner for the info. Much appreciated.

    ReplyDelete

Error 1312 when adding ssl cert

 If you get an error when using netsh to add a cert thumbprint, make sure you have a private key attached to the cert. Also, make sure the c...