2
1
I want to reorder the SSL Cipher Suite Order applied as part of KB2919355, prioritizing the forward secrecy suites above all else.
Trying to do this with gpedit
at Computer Configuration > Administrative Templates > Network > SSL Configuration Settings > SSL Cipher Suite Order is a problem because the new list goes over the tool's character limit.
Is there anyway to overcome this limit so I don't have to keep the current priority or omit something from the list?
If I understood correctly, here's explained how: http://gpsearch.azurewebsites.net/#58
– and31415 – 2014-05-26T21:55:03.407@and31415 Yep, that's how, but the new list is about 1400 characters. Actually, the list that ships out of the box is over 1023 characters as well. So there's no editing it without removing some items. (I believe textboxes in
gpedit
have a 1023 character limit.) – Louis – 2014-05-26T22:26:55.917For example, here is what I can copy from the textbox when it is seeded with the default, OOTB list. And here is what it gets truncated to after immediately pasting it back in.
– Louis – 2014-05-26T22:37:34.317What if you edit the
Functions
registry value directly? – and31415 – 2014-05-27T06:59:37.113@and31415 Okay, I think I just understood what you were pointing me at. I'll give it a shot. – Louis – 2014-05-27T18:40:35.850
@and31415 Thanks so much. Seems to be working according to this SSLLabs test (with a few quirks). Would you mind making an answer?
– Louis – 2014-05-27T19:45:58.017