On Wed, 21 Jan 2015 23:19:47 -0800 (PST),
Post by c***@gmail.comIn our production apache web server,we have the SSL configured and
the requests from the browser with TLS are failing.Our server is on
RHEL 4.0.We need to configure the SSL certificate.so, that it also
accepts the TLS web browser settings.Please assist us in doing
so.Any quick assistance is really appreciable.Please don the
needful.Thanks in advance.
RHEL 4 is rather old, and I and it may turn out that the standard RH
SSL libs do not support all the latest greatest options. Unless you're
compiling from source??
Here is some light reading:
https://raymii.org/s/tutorials/Strong_SSL_Security_On_Apache2.html
Pay particular attention to
SSLProtocol All -SSLv2 -SSLv3
"All is a shortcut for +SSLv2 +SSLv3 +TLSv1 or - when using OpenSSL
1.0.1 and later - +SSLv2 +SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2,
respectively." I'm guessing your configuration doesn't know what to do
with TLS connections, and thus fails. What do your error logs say
about the TLS connections?
Test on a non-production server. I presume your apache is 2.2? what is
your ssl library version? TLS is just rebranded SSL. You just have to
point your http configuration to point at your SSL certificates. Something
like this:
SSLEngine on
# If both key and certificate are stored in the same file, only the
# SSLCertificateFile directive is needed.
SSLCertificateFile /path/to/ssl/certs/server.pem
SSLCertificateKeyFile /path/to/ssl/private/server.key
Test, test, test. It is easy to get wrong, and it is easy to get
something that "works" but is still wrong from a security stand point.
--
Consulting Minister for Consultants, DNRC
I can please only one person per day. Today is not your day. Tomorrow
isn't looking good, either.
I am BOFH. Resistance is futile. Your network will be assimilated.