Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: IIS enable OCSP stapling |
|
| Author |
|
gijs
Joined: 27 Apr 2012
Posts: 189
Location: The Netherlands
|
 Posted: Thu 11 Jun '15 19:08 Post subject: IIS enable OCSP stapling |
 |
|
1.
I've been looking in to enabling OCSP stapling on IIS in Windows Server 2012 R2, but can't seem to find any info on how to do this.
According to most article's it's enabled by default, but I just tested this with the ssllabs.com test and it's disabled..
I have no idea as to why it's disabled or how to enable it. 
2.
Additionally I'd like to know how to enable TLS_FALLBACK_SCSV.
Some article's suggest creating a dword called UseScsvForTls with a value of 1 in HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL
I've done this, and rebooted the server. But according to the test from ssllabs.com it's still disabled. |
|
| Back to top |
|
jraute
Joined: 13 Sep 2013
Posts: 188
Location: Rheinland, Germany
|
|
| Back to top |
|
gijs
Joined: 27 Apr 2012
Posts: 189
Location: The Netherlands
|
| Posted: Sat 13 Jun '15 16:47 Post subject: |
|
|
I had already seen that technet article, and unfortunately it didn't help  |
|
| Back to top |
|
|
|
|
|
|
