Carl's blog

IIS cipher reordering. Fix FTP-SSL “550 The supplied message is incomplete”, tame BEAST, etc.

by on Nov.13, 2013, under Computer Stuff

Placing RC4 cipher to top of the list fixes the FTP-SSL file upload problem (“550 The supplied message is incomplete” response to uploads) with IIS7 & 7.5.
(same as one of the fixes in : http://blogs.msdn.com/b/kaushal/archive/2011/10/03/taming-the-beast-browser-exploit-against-ssl-tls.aspx Move “TLS_RSA_WITH_RC4_128_SHA” to the top of the priority list.)
Unfortunately the given method for doing this (Group Policy) is non workable due to the 1023 char limit in the group policy value field.

Use IIS Crypto to make the job easy peasy. Now FTP-SSL uploads work.

Settings as below:
iiscrypto

:, , , , , , , , ,

Comments are closed.

Looking for something?

Use the form below to search the site:

Still not finding what you're looking for? Drop a comment on a post or contact us so we can take care of it!

Blogroll

A few highly recommended websites...