Windows 10: How to generate a CSR that supports ECDHE ciphers

Been scratching my head on how I can generate a self-singed certificate in a server without a CA that will support these ciphers.

:)

 

outlook 2010 on windows 7 get error that your server does not support connection encryption type SSL

After 12 hours of research i found the solution and i need to share it with all :

Windows 7 supports TLS 1.1 and TLS 1.2. However, these protocol versions are not enabled on Windows 7 by default.

in this case you have two option first one is more secure.

If you have many clients and you can't apply registry keys change to their pcs you should go to option 2

option 1 : Enable TLS 1.1 and TLS 1.2 in windows 7 by using the following link (I not test this option):

https://support.cybersource.com/s/article/How-do-I-enable-TLS-1-2-on-Windows-7

option 2 : open TLS V1 and TLS V1_1 in your WHM/Cpanel by WHM

WHM --> Home --> Service Configuration --> Exim Configuration Manager --> Security

change Options for OpenSSL to:

+no_sslv2 +no_sslv3

Change SSL/TLS Cipher Suite List to:

ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384HE-RSA-AES128-GCM-SHA256HE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHAHE-RSA-AES128-SHA256HE-RSA-AES128-SHAHE-RSA-AES256-SHA256HE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:!DSS

I get this from the following link better to read it :

In Outlook server doesn't support the encryption method specified error

I have this problem and its solved by using the option 2

You should be careful about changing Cipher protocols as cpanel team suggest you can read the following :

How to Adjust Cipher Protocols - cPanel Knowledge Base - cPanel Documentation

Thanks

 

Cipher Error : The Request is not supported.


Upon trying to use Cipher to do some simple encrypting on my machine I have ran into some issues.



If I execute Cipher.exe from the Command Prompt it seems to be functioning normally and subsequently lists all folders on the current directory with a U in front of them indicating that they are unencrypted, however, when I attempt to encrypt a directory ... or rather the files within it ... I get an error that reads " The request is not supported " beside each file listed in the directory and an overall summery that 0 files were encrypted.

I noticed that there is no Cipher.dll file on my machine, as according to some due diligence research, perhaps should have been. I located the only cipher.dll I could find, however, upon trying to register it I received an error that " the module was downloaded but the entry point DllRegisterServer was not found. I also found an update on Microsoft's website, (KB4032188), that claimed to resolve known Cipher issues, however, was unable to install it on my machine as it kept stating that the update was not applicable to the particular Windows 10 build I am running. I also tried to use TLS 1.0 only and still received the same error. Any ideas?

 

CMD cipher /e on a folder output "Request not supported"

I've recently discovered cipher command on windows-10 command-line.

Now, the problem is when I'm try to execute cipher /e [directory name] or cipher /e [absolute path], because I'm always receiving the error [directory name]: Request not supported..

Some useful info:

• I'm running Microsoft Windows 10 Home
  
• I've executed the command as administrator either on 'cmd' and 'powershell'
  
• The disk's file system is in 'NTFS'.
  
• I've gave all the access to all the users in the 'Security' attribute on the interested folder(An empty folder for test purposes).
  

Could someone give me a hint/suggestion/solution about where the problem could be? Am I missing something important?