Weak ciphers presented in Client Hello

book

Article ID: 100040780

calendar_today

Updated On:

Description

Error Message

This issue does not present any error messages. The weak ciphers can be detected using a third-party network packet monitoring tool.

Resolution

To resolve this issue, use one of the following solutions. Note that the first two workarounds below alter system-wide settings and will affect all .NET applications on your system.

  • Set the following registry key to enable strong ciphers to be used for all .NET applications:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft.NETFramework\v4.0.30319: SchUseStrongCrypto.
  • Restrict certain ciphers using the following registry key:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers.
  • Create a different subkey for each group of cipher suites. Details about how to create a different subkey for each group of ciphers can be found at https://support.microsoft.com/en-in/help/245030/how-to-restrict-the-use-of-certain-cryptographic-algorithms-and-protoc.

Issue/Introduction

Weak ciphers are presented in the Client Hello while connecting to an Amazon feed URL.