Re: [users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-24 Thread Pavel Heimlich, a.k.a. hajma
it seems unrelated. Their issue is when there's a gap in the list of protocols. That's not my case. čt 24. 6. 2021 v 17:34 odesílatel Nick Folino napsal: > See if this helps. From 2 Jun. > > "Newer Apache does not offer TLS cipher with TLSv1 anymore" > > On Thu, Jun 24, 2021 at 11:24 AM Pavel H

Re: [users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-24 Thread Pavel Heimlich, a.k.a. hajma
čt 24. 6. 2021 v 17:54 odesílatel Otis Dewitt - NOAA Affiliate napsal: > You may be having certificate issues. Try testing the certificates first. > > # Your first error message is: AH02008: SSL library error 1 in handshake > > # Run This > openssl verify /etc/certs/localhost/host.crt > > # op

Re: [users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-24 Thread Jim Albert
I'm not following your port configs. If you want to listen on 215 for https then I'd expect you need: Listen 215 https ... and then you'd have to choose a different port for http. I'd try different ports and see if it makes a difference and possibly rule out any cipher issues. Jim On 6/24/202

Re: [users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-24 Thread Otis Dewitt - NOAA Affiliate
You may be having certificate issues. Try testing the certificates first. # Your first error message is: AH02008: SSL library error 1 in handshake # Run This openssl verify /etc/certs/localhost/host.crt # If you get This error 20 at 0 depth lookup:unable to get local issuer certificate # The

Re: [users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-24 Thread Nick Folino
See if this helps. From 2 Jun. "Newer Apache does not offer TLS cipher with TLSv1 anymore" On Thu, Jun 24, 2021 at 11:24 AM Pavel Heimlich, a.k.a. hajma < tropikha...@gmail.com> wrote: > I went through the past 6 months and couldn't find a relevant one. Would > you recall some particular keywor

Re: [users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-24 Thread Pavel Heimlich, a.k.a. hajma
Basically yes. It was this hack that redirected users to https when they tried http. But it stopped working when I tried to drop TLSv1.1 čt 24. 6. 2021 v 15:31 odesílatel Jim Albert napsal: > > 215 is configured to answer for both http and https? I only see one Listen > config in your original p

Re: [users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-24 Thread Pavel Heimlich, a.k.a. hajma
I went through the past 6 months and couldn't find a relevant one. Would you recall some particular keyword I could search for? čt 24. 6. 2021 v 12:37 odesílatel Nick Folino napsal: > Search the archives. I believe there's a recent thread about this. > > On Thu, Jun 24, 2021 at 4:26 AM Pavel He

Re: [users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-24 Thread Jim Albert
On 6/24/2021 4:25 AM, Pavel Heimlich, a.k.a. hajma wrote: čt 24. 6. 2021 v 3:56 odesílatel Jim Albert > napsal: Have you attempted from more than one client? yes. Firefox and wget. Both behave identically. Expand more, please on what you have running on

Re: [users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-24 Thread Nick Folino
Search the archives. I believe there's a recent thread about this. On Thu, Jun 24, 2021 at 4:26 AM Pavel Heimlich, a.k.a. hajma < tropikha...@gmail.com> wrote: > > > čt 24. 6. 2021 v 3:56 odesílatel Jim Albert napsal: > >> Have you attempted from more than one client? >> > > yes. Firefox and wg

Re: [users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-24 Thread Pavel Heimlich, a.k.a. hajma
čt 24. 6. 2021 v 3:56 odesílatel Jim Albert napsal: > Have you attempted from more than one client? > yes. Firefox and wget. Both behave identically. > > Expand more, please on what you have running on port 215. I'm unfamiliar > with the Solaris apache configs. > there's just the Apache serve

Re: [users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-24 Thread Pavel Heimlich, a.k.a. hajma
With the SSLProtocol -ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 +TLSv1.2 line in config: [Thu Jun 24 07:59:41.488363 2021] [ssl:info] [pid 2213:tid 1] AH01883: Init: Initialized OpenSSL library [Thu Jun 24 07:59:41.488427 2021] [ssl:warn] [pid 2213:tid 1] AH01873: Init: Session Cache is not configured [hi