0

Does anyone know which Cipher Suite needs to be enabled on a Win10 machine to download packages from the Windows store. I need to configure my device with a subset of ciphers and when I do it fails with error 0x80240438.

I used fiddler and i saw the connection from svchost being closed.

Note that if I disable the custom cipher list, I don't have a problem.

Here is the cypher list I have configured:

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384_P384
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384_P256
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P384
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256
TLS_RSA_WITH_3DES_EDE_CBC_SHA
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
8
  • The required ciphers to download something on the Windows Store are already installed. In fact the cryptography library used by Windows cannot actually be uninstalled.
    – Ramhound
    Sep 3, 2020 at 16:06
  • Yeah, i know the OS supports it, I just need to know which one i need to add to the list above. Sep 3, 2020 at 16:29
  • You didn't originally provide that list.
    – Ramhound
    Sep 3, 2020 at 16:31
  • I don't understand your test results. This indicates that microsoft.com supports all those ciphers. You could try throwing one of the weaker TLS 1.2/TLS 1.1 ciphers into your list to see if that makes a difference. To my knowledge the Microsoft Store application itself uses Legacy Edge to display the web content. The next first of the web content control is out but Microsoft Store won't get that update until the next refresh (more than likely)
    – Ramhound
    Sep 3, 2020 at 17:22
  • The reason Microsoft.com was used because the application is obviously communicating with that host. The cipher being used would be determine by the server not the application (client) in a case like this.
    – Ramhound
    Sep 3, 2020 at 17:24

0

You must log in to answer this question.

Browse other questions tagged .