IIS 7 and Above
KB4019276 and KB2888853
Last post Aug 30, 2017 08:03 AM by Yuk Ding
Aug 19, 2017 03:20 AM|Snuff Daddy|LINK
KB4019276 adds support for TLS 1.1 and TLS 1.2 in Windows Server 2008 SP2. However, it completely breaks FTP (error "The supplied message is incomplete"). KB2888853 allegedly fixes this problem, however it does not support Windows Server 2008 SP2 and refuses
to install. What are we to do?
Aug 21, 2017 06:25 AM|Yuk Ding|LINK
It seems that the KB2888853 works fine with 2008 R2 instead of 2008. You could check the version of windows server which is supported by KB2888853. It looks like the 2008r2 and later version could works fine with this patch. So maybe you need to find another
way to fix this issue. Pleast check the TLS configuration in IE advanced setting and registry:
Or you could check the TLS configuration with IIS crypto.
In addition, just ensure the anti-virus/firewall will not block the connection.
Aug 21, 2017 07:23 PM|Snuff Daddy|LINK
Disabling TLS is not an acceptable solution. KB4019276 breaks FTP, plain and simple. It is Microsoft's responsibility to fix this, just as they already did for 2008 R2.
Aug 22, 2017 03:04 PM|Rovastar|LINK
Aug 22, 2017 05:05 PM|lextm|LINK
It is Microsoft's responsibility to fix this, just as they already did for 2008 R2.
Microsoft has its own support policies, based on product lifecycle,
Thus, as main stream support expired for this product more than two years ago, there would only be limited support on it. Open a support case via
http://support.microsoft.com and use the proper channel to express your concerns.
Aug 22, 2017 05:22 PM|Snuff Daddy|LINK
TLS 1.1 has the same bug. Lifecycle does not apply in this case. Microsoft released a flawed update, foolishly so since the exact same bug existed in Win 2008 R2. That warrants a fix - especially considering that they are already have the code for it.
You cannot release a new update with a flaw and then suddenly claim lifecycle, that is absurd.
Aug 30, 2017 08:03 AM|Yuk Ding|LINK
Maybe update the Windows server2008 to 2008 R2 could be a solution.