none
Cannot communicate to web app powered by Node 4.6 from Windows Server 2003 using HTTPS RRS feed

  • Question

  • I have web client running on Windows Server 2003 communicating with web app powered by NodeJS. The protocol is HTTPS. The web client uses Microsoft's SSL components.

    When I updated the Node from ver 4.4.0 to 4.6.0, I couldn't connect to the web app anymore. This applies only to the web clients and browsers using Microsoft's SSL components, e.g. Internet Explorer.

    When I tried to reach the web app from Firefox, all was good. Also, there was no problem to connect to my web app from more recent Windows, e.g. Win 8.

    I have workaround solution put in place, I just wanted to alert Microsoft team of this issue. Can't say if it's Node issue or Windows Server 2003 issue - probably the later.
    Tuesday, October 4, 2016 1:36 AM

All replies

  • There is a solution - I was advised on Github by shigeki:

    DES3 ciphers were dropped by default due to SWEET32 attack in the last openssl upgrade so that only AES is available for symmetric ciphers in the current Node.
    You need to add DES3 cipher suites explicitly in the options or apply a HotFix to Win Server 2003 to support AES as indicated in https://support.microsoft.com/en-us/kb/948963.

    This fixed the problem. See the Github issue:

    https://github.com/nodejs/node/issues/8944

    Thursday, October 6, 2016 11:06 AM