On Sun, Nov 19, 2023 at 3:25 PM John <john.ili...@iliffe.ca> wrote:
> On Sun, 2023-11-19 at 15:17 -0500, Eric Covener wrote: > > On Sun, Nov 19, 2023 at 3:15 PM John <john.ili...@iliffe.ca> wrote: > > > > > > On Sun, 2023-11-19 at 14:35 -0500, Eric Covener wrote: > > > > On Sun, Nov 19, 2023 at 2:31 PM John <john.ili...@iliffe.ca> wrote: > > > > > > > > > > When I try to connect to Apache (2.4.53) using TLS 1.3 I get a > browser error: > > > > > Error code: SSL_ERROR_RX_RECORD_TOO_LONG (Firefox) > > > > > > > > What does your SSL-enabled virtualhost look like > > > > > > Here is the example.conf include file; ssl.conf follows > > > > > > # SSL Support for example.ca ONLY! > > > <Virtualhost *:443> > > > ServerName www.example.ca > > > ServerAlias t.example.ca > > > DocumentRoot /usr/httpd/example > > > Options -MultiViews > > > H2Direct on > > > ProxyPassMatch "^/.*\.php(/.*)?$" fcgi:// > 127.0.0.1:9002/usr/httpd/example > > > # SSLEngine on > > > > ^^^ Pretty suspicious? > > > > > SSLEngine being commented out? It is already turned on in ssl.conf and > one of the problems that I > already had to fix was duplicate entries between conf file sections. > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > > For additional commands, e-mail: users-h...@httpd.apache.org > > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > > You can't inherit SSLEngine on like that - you must either set it in the vhost context, or include a file that sets it. I don't see an include directive in your vhost, either.
