13
1
I want to check if my server has SSLv2 disabled. I am doing this by attempting to connect remotely with openssl with the following shell command.
openssl s_client -connect HOSTNAME:443 -ssl2
Most literature I could find on the Internet says if I see something similar to the following error then SSLv2 is properly disabled.
29638:error:1407F0E5:SSL routines:SSL2_WRITE:ssl handshake failure:s2_pkt.c:428:
I do get the above error when connecting to my Ubuntu server with SSLv2 disabled in Apache Apache but when I connect to my Windows Server 2008 R2 server with SSLv2 disabled in the registry I get the following output and error.
CONNECTED(00000003)
write:errno=104
I can't find any literature explaining this output and error. If anybody could explain to me if and why this output and error means that SSLv2 is properly disabled, I would appreciate it.
Thanks!
Your firewall is usually the one intermediary who sends the RST packet. But if that is not the problem, sometimes forcing SSL3 with the
-ssl3
option or using the-servername
option can get past this. – Amit Naidu – 2019-06-20T22:35:19.870So I'm wondering if the TCP RST packet is sent from Windows Server 2008 R2 when a client tries to connect with SSLv2 when the server has SSLv2 disabled – David – 2011-06-17T07:32:03.270