Re: [users@httpd] Still have messed up TLS

2023-11-27 Thread Frank Gingras
On Mon, Nov 27, 2023 at 2:47 PM John wrote: > On Sun, 2023-11-26 at 18:06 -0500, Paul wrote: > > On 2023-11-26 16:12, John wrote: > > > After a week of chasing this around I have managed to change the > problem several times but I'm > > > still > > > unable to get Apache started. I **think** the

Re: [users@httpd] Still have messed up TLS

2023-11-27 Thread John
On Sun, 2023-11-26 at 18:06 -0500, Paul wrote: > On 2023-11-26 16:12, John wrote: > > After a week of chasing this around I have managed to change the problem > > several times but I'm > > still > > unable to get Apache started.  I **think** there is something unrelated to > > the error that I'm

Re: [users@httpd] Still have messed up TLS

2023-11-26 Thread Paul
On 2023-11-26 16:12, John wrote: After a week of chasing this around I have managed to change the problem several times but I'm still unable to get Apache started. I **think** there is something unrelated to the error that I'm seeing that may have been included in the default config but before

Re: [users@httpd] Still have messed up TLS

2023-11-26 Thread Frank Gingras
On Sun, Nov 26, 2023 at 4:13 PM John wrote: > After a week of chasing this around I have managed to change the problem > several times but I'm still > unable to get Apache started. I **think** there is something unrelated to > the error that I'm seeing > that may have been included in the defaul

Re: [users@httpd] Still have messed up TLS

2023-11-26 Thread John
After a week of chasing this around I have managed to change the problem several times but I'm still unable to get Apache started. I **think** there is something unrelated to the error that I'm seeing that may have been included in the default config but before I go down that rabbit hole I real

Re: [users@httpd] Still have messed up TLS

2023-11-22 Thread Eric Covener
On Wed, Nov 22, 2023 at 10:30 PM John wrote: > > Thanks for the reply Aditya. > > The version of openssl is: openssl-3.0.7-6.el9_2.x86_64 > > the version of mod_ssl is: mod_ssl-2.4.53-11.el9_2.5.x86_64 > > The result of openssl ciphers -s -v tlsv1_3 is: > TLS_AES_256_GCM_SHA384 TLSv1.3 K

Re: [users@httpd] Still have messed up TLS

2023-11-22 Thread John
Thanks for the reply Aditya.   The version of openssl is: openssl-3.0.7-6.el9_2.x86_64 the version of mod_ssl is: mod_ssl-2.4.53-11.el9_2.5.x86_64 The result of openssl ciphers -s -v tlsv1_3 is: TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=any Au=any Enc=AESGCM(256) Mac=AEAD T

Re: [users@httpd] Still have messed up TLS

2023-11-21 Thread Aditya Shastri
To answer your question to the best of my knowledge, 1. Openssl 1.1.1 and above support TLSv1.3. These are the TLSv1.3 ciphers Openssl 3.0 support https://www.openssl.org/docs/man3.0/man3/SSL_CTX_set_ciphersuites.html 2. This link says that TLSv1.3 is supported. https://httpd.apache.org/docs/2.4/mo

[users@httpd] Still have messed up TLS

2023-11-21 Thread John
Apache won't start when https/TLS is activated although it runs fine with only http. I made the changes previously suggested but now httpd just doesn't start. The error from systemctl is: - Nov 21 15:17:51 prod02 systemd[1]: Starting The Apache HTTP Server... Nov 21 15:17:51 prod02 systemd[