Does windows 2003 support TLS 1.1 and 1.2. The server need to consume the service hosted on other server, using https with TLS 1.1 and 1.2 certificate.
3
-
1Do you mean a situation in which some service or application running on Windows 2003 connects to a webserver (or other service) with TLS?– techrafAug 2, 2016 at 4:46
-
3The certificate is unrelated to the protocol; the same cert can be used for all of SSL3 and TLS 1.0 1.1 1.2 (though of course you shouldn't use SSL3). However, other things in the cert (or chain) may matter; in particular S2003 needed a hotfix for RSA-with-SHA2 signatures which all public CAs have been using for at least a year. (XP got the same fix in SP2). Also some modern servers want SNI which is technically independent of protocol but was mostly implemented at the same time as 1.1; IIRC both S2003 and XP didn't do SNI.– dave_thompson_085Aug 2, 2016 at 8:41
-
@techraf yes, it is.– John HpaAug 19, 2016 at 3:03
Add a comment
|
1 Answer
It is not supported natively. Support for TLS 1.1 and 1.2 was added to Windows Server 2008 R2.
See How to restrict the use of certain cryptographic algorithms and protocols in Schannel.dll.
Neither IIS provided with Windows 2003 nor Internet Explorer versions 7 and 8 (executable on Windows 2003) support TLS 1.1/TLS 1.2.
If the application uses the library provided by operating system (schannel.dll), then Windows 2003 supports only: SSL 2.0, SSL 3.0 and TLS 1.0.
However if the application used/implemented another library, it might support the versions in question (for example Chrome and Firefox browsers support TLS 1.1 and 1.2 when running on older Windows systems as well).
