Sign in   |  Join   |  Help

Lintronic (Windows 7 TLS/SSL) issues

rated by 0 users
Not Answered This post has 0 verified answers | 4 Replies | 2 Followers

Aleksei
Top 500 Contributor
Russia
84 Posts
OFFLINE
Bronze Member
Aleksei posted on Tue, Jun 1 2021 7:13 PM

I have recently tried to install the Lintronic Configurator on Windows 7 machine, but faced the issue that I cannot download the software, because Lintronic has changed the encryption protocol on the servers. After several tricks with another Win 10 machine I have managed to download and install the software, but still cannot connect to activate the license.

I have read and implemented both Lintronic AppNote and Microsoft Article but with no success. The log says it is unable to create the SSL/TLS channel.

Does anyone know the solution for that?

https://beointegration.wordpress.com/

1:BV7+BL7.1+BS4+BL6000+BV6+BL2000+MLGW+Beo4

2:BV7+BL7.4+BL3500+BM5+BL3+Lutron GE/Sivoia QS+HikVision+Dune+LinTronic+BLGW+Beo4+Beo5+Essence remote+BeoTime+BeoLinkPC+BL4+KNX+... BeoMaster900

All Replies

Ravsted
Top 500 Contributor
Denmark
265 Posts
OFFLINE
Bronze Member

Hi

I upgraded to the most recent version on Windows 10 and I had to modify the registry as specified in the release notes.

I suggest you doublecheck those entries (location, spelling, type etc.)

After a reboot it worked for me.

Should it still fail then I suggest you contact Lintronic support.

Michael usually answers very quickly...

Regards

Ravsted 

 

Aleksei
Top 500 Contributor
Russia
84 Posts
OFFLINE
Bronze Member

Thank you, Ravsted,

For some reasons I am not ready to leave Windows 7 (I also have to have the dedicated 32-bit machine for Beo5 programming).

Indeed, Michael answered very quickly, pointing me to the application note, but when I have said that it does not work, the support stopped.

I have studied the topic and realized that looks like Lintronic.dk uses the encryption protocol (TLS 1.3 and 1.2) and algorithms (cipher suites) that are not supported by Windows 7 and there are no way to install newer suites. Thus it means that Lintronik is not compatible with Windows 7 anymore. I will write to Michael today with details.

Will be funny if I need have to keep another dedicated machine for programming Lintronic... The good thing of this story is that now I know much more about encryption algoritms and its configurations.

https://beointegration.wordpress.com/

1:BV7+BL7.1+BS4+BL6000+BV6+BL2000+MLGW+Beo4

2:BV7+BL7.4+BL3500+BM5+BL3+Lutron GE/Sivoia QS+HikVision+Dune+LinTronic+BLGW+Beo4+Beo5+Essence remote+BeoTime+BeoLinkPC+BL4+KNX+... BeoMaster900

Aleksei
Top 500 Contributor
Russia
84 Posts
OFFLINE
Bronze Member

I have the answer from Michael which I will not quote here because it is below my understanding of politeness. But shortly, he said that Win 7 is not supported and the server settings will not be updated.

I list here my own findings that may be useful for other users who will face the same issue (quoted from letter to Michael):

I have checked what encryption method Lintronic.dk uses with this tool: https://www.ssllabs.com/ssltest/analyze.html?d=lintronic.dk&hideResults=on&latest
You can see that the server only supports TLS1.2 and 1.3. Version 1.3. was developed pretty recently and was not designed for Windows 7, so I did not considered it. Version 1.2. on site supports the following cipher suites:
# TLS 1.2 (suites in server-preferred order)
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)   ECDH secp521r1 (eq. 15360 bits RSA)   FS
256
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)   ECDH secp521r1 (eq. 15360 bits RSA)   FS
128
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca8)   ECDH secp521r1 (eq. 15360 bits RSA)   FS
256

At the same time I have checked what suites are compatible with Windows 7 here: https://docs.microsoft.com/en-us/windows/win32/secauthn/tls-cipher-suites-in-windows-7 and you can see that the suites that Lintronic uses are not compatible with Windows 7. Actually, the oldest version that supports it is Windows 10: https://docs.microsoft.com/en-us/windows/win32/secauthn/tls-cipher-suites-in-windows-10--version-1507, so customers with Win 8.1 may have some troubles too, that I cannot test.

Unfortunately user cannot install the needed suites himself and since older versions of Windows are not supported, the only way to provide compatibility is to adjust the server settings.


https://beointegration.wordpress.com/

1:BV7+BL7.1+BS4+BL6000+BV6+BL2000+MLGW+Beo4

2:BV7+BL7.4+BL3500+BM5+BL3+Lutron GE/Sivoia QS+HikVision+Dune+LinTronic+BLGW+Beo4+Beo5+Essence remote+BeoTime+BeoLinkPC+BL4+KNX+... BeoMaster900

Aleksei
Top 500 Contributor
Russia
84 Posts
OFFLINE
Bronze Member

My final solution is:

1. I have installed Win 10 in the VirtualBox hosted in Win 7 machine. Actually you do not necessarily need to activate Win 10.

2. I have installed the Lintronic Configurator in the Windows 10. Registry tweak mentioned in AppNote is needed to obtain the license from the server.

3. I have used the USB-Serial cable to connect to Lintronic. You need to make sure that you have set the USB forwarding in VirtualBox properly and install the cable drivers at Win 10.

4. It works.

https://beointegration.wordpress.com/

1:BV7+BL7.1+BS4+BL6000+BV6+BL2000+MLGW+Beo4

2:BV7+BL7.4+BL3500+BM5+BL3+Lutron GE/Sivoia QS+HikVision+Dune+LinTronic+BLGW+Beo4+Beo5+Essence remote+BeoTime+BeoLinkPC+BL4+KNX+... BeoMaster900

Page 1 of 1 (5 items) | RSS
Beoworld Security Certificate

SSL