User Tools

Site Tools


microsoft:desktop:win_8:registry_edit_-_sstp_vpn

Vulnerability in SSL/TLS could allow information disclosure

http://support.microsoft.com/kb/2643584

By default, this security update sets the Opt-in mode at the schannel level, because of application compatibility issues. To disable this security update for all applications system-wide, you must add a DWORD value named SendExtraRecord that has a value of 2 to the following registry subkey:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL

To add this schannel registry entry registry entry, follow these steps:

Click Start, click Run, type regedit in the Open box, and then click OK.

Locate and then click the following subkey in the registry: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL

On the Edit menu, point to New, and then click DWORD Value. Type SendExtraRecord for the name of the DWORD, and then press ENTER. Right-click SendExtraRecord, and then click Modify. In the Value data box, type 2 to disable the split record in schannel, and then click OK.

Exit Registry Editor.

microsoft/desktop/win_8/registry_edit_-_sstp_vpn.txt · Last modified: 2016/03/03 02:50 by 127.0.0.1