Document connection and Sharepoint (Sharepoint not allowing SSL3 but only TLS)

At my office they have just changed the way we connect to Sharepoint, so they are not allowing SSL v3 anymore, you must use TLS. 

This means I cannot edit files (Excel, Word, Powerpoint) directly on Sharepoint using the document connection application or by using Safari.

Im getting a certificate error.

Does Office 2011 not support TLS with the document connection or the sharepoint plugin in Safari?

Theres more info about the SSL 3 poodle vulnerability here:

http://security.stackexchange.com/questions/70719/ssl3-poodle-vulnerability

 

Question Info


Last updated January 7, 2019 Views 1,219 Applies to:
Answer
Answer

leeknay, thank you for confirming this! It's good to know you also resolved this issue by enabling that cipher.

I can confirm enabling the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher on our Server 2012 R2 SharePoint 2013 Web Front Ends did resolve the connection issues we had with Mac Office 2011.

For those interested, we used a very handy freeware utility IISCrypto for changing the cipher settings. 

https://www.nartac.com/Products/IISCrypto/Default.aspx

It was much more convenient than directly modifying the registry by hand, however you can find information on the SCHANNEL registry settings and modifying them here:

https://support.microsoft.com/kb/245030

Remember to have good backups and to backup your registry keys before changing things.

Specifically in this case export (backup):

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Answer
Answer
I have verified that Office 2011 document connect can connect with TLSv1. I have observed successful negotiation to TLSv1 to sharepoint 2010 using wireshark.

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.