{"id":296,"date":"2011-02-09T11:51:26","date_gmt":"2011-02-09T09:51:26","guid":{"rendered":"http:\/\/marwin.e-blog.cz\/?p=296"},"modified":"2011-05-18T12:55:42","modified_gmt":"2011-05-18T10:55:42","slug":"iis-6-0-7-0-protokoly-pct-1-0-ssl-2-0-ssl-3-0-nebo-tls-1-0-a-sifrovaci-al-a-protokoly-v-souboru-channel-dll","status":"publish","type":"post","link":"https:\/\/svobodma.cz\/?p=296","title":{"rendered":"IIS 6.0, 7.0 Protokoly PCT 1.0, SSL 2.0, SSL 3.0 nebo TLS 1.0 a \u0161ifrovac\u00ed al. a protokoly v souboru channel.dll"},"content":{"rendered":"<p>V p\u0159\u00edpad\u011b provozov\u00e1n\u00ed web. slu\u017eeb na OP Windows server 2003 , 2008 je dobr\u00e9 ov\u011b\u0159it nastaven\u00ed \u0161ifrov\u00e1n\u00ed a pou\u017e\u00edvan\u00ed protokol\u016f pro bezpe\u010dnou komunikaci mezi  klientem a serverem. U Windows server 2003 a dokonce i u Windows 2008 je nap\u0159. protokol SSL 2.0 standardn\u011b zapnut. Ten obsahuje bez. chyby kter\u00e9 jsou opraveny a\u017e v SSLv3, TLS 1.0, 1.2<br \/>\nU star\u0161\u00edch OS je doporu\u010deno zak\u00e1zat slab\u00e9 \u0161ifry DES 56\/56, NULL, RC2 40\/128, RC4 40\/128, RC4 56\/128. <\/p>\n<p>Vyzkou\u0161ejte si test , kter\u00fd je online!<\/p>\n<p><a href=\"http:\/\/foundeo.com\/products\/iis-weak-ssl-ciphers\/test.cfm\"> Klikni sem <\/a> <\/br><\/p>\n<p>Navod jak upravit registry naleznete na str\u00e1nk\u00e1ch Microsoftu<\/p>\n<p>KB web link<\/p>\n<p>How to Restrict the Use of Certain Cryptographic Algorithms and  Protocols in Schannel.dll<\/p>\n<p><a href=\"http:\/\/support.microsoft.com\/kb\/245030\/en-us\"> http:\/\/support.microsoft.com\/kb\/245030\/en-us <\/a> <\/br><\/p>\n<p>How to disable PCT 1.0, SSL 2.0, SSL 3.0, or TLS 1.0 in Internet  Information Services<\/p>\n<p><a href=\"http:\/\/support.microsoft.com\/kb\/187498\/en-us\"> http:\/\/support.microsoft.com\/kb\/187498\/en-us <\/a> <\/br><\/p>\n<p>nebo pou\u017eijte tento jednoduch\u00fd n\u00e1vod<\/p>\n<p>p\u0159id\u00e1n\u00edm kl\u00ed\u010de typu DWORD jmeno &#8222;Enabled&#8220; s hodnotou 00000000 decimal.<\/p>\n<p>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\SCHANNEL<br \/>\nSCHANNEL\\Ciphers\\RC4 56\/128<br \/>\nSCHANNEL\\Ciphers\\RC2 56\/128<br \/>\nSCHANNEL\\Ciphers\\RC4 40\/128<br \/>\nSCHANNEL\\Ciphers\\RC2 40\/128<\/p>\n<p>p\u0159id\u00e1n\u00edm kl\u00ed\u010de typu DWORD jmeno &#8222;Enabled&#8220; s hodnotou 00000000 decimal.<\/p>\n<p>HKey_Local_Machine\\System\\CurrentControlSet\\Control\\SecurityProviders \\SCHANNEL\\Protocol<br \/>\nProtocol\\SSL 2.0\\Client<br \/>\nProtocol\\SSL 2.0\\Server<br \/>\n&#8230;..<br \/>\n&#8230;&#8230;&#8230;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>V p\u0159\u00edpad\u011b provozov\u00e1n\u00ed web. slu\u017eeb na OP Windows server 2003 , 2008 je dobr\u00e9 ov\u011b\u0159it nastaven\u00ed \u0161ifrov\u00e1n\u00ed a pou\u017e\u00edvan\u00ed protokol\u016f pro bezpe\u010dnou komunikaci mezi klientem a serverem. U Windows server 2003 a dokonce i u Windows 2008 je nap\u0159. protokol &hellip; <a href=\"https:\/\/svobodma.cz\/?p=296\">Cel\u00fd p\u0159\u00edsp\u011bvek <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[15],"tags":[],"class_list":["post-296","post","type-post","status-publish","format-standard","hentry","category-iis"],"_links":{"self":[{"href":"https:\/\/svobodma.cz\/index.php?rest_route=\/wp\/v2\/posts\/296","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/svobodma.cz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/svobodma.cz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/svobodma.cz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/svobodma.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=296"}],"version-history":[{"count":11,"href":"https:\/\/svobodma.cz\/index.php?rest_route=\/wp\/v2\/posts\/296\/revisions"}],"predecessor-version":[{"id":327,"href":"https:\/\/svobodma.cz\/index.php?rest_route=\/wp\/v2\/posts\/296\/revisions\/327"}],"wp:attachment":[{"href":"https:\/\/svobodma.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=296"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/svobodma.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=296"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/svobodma.cz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}