Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
MIME-Version: 1.0
In-Reply-To: 
 <CACSyv8R-TDm2XBmriANqhidxBHkQ8qPih3iu02S9MWt6RK_JdA@mail.gmail.com>
References: 
 <CACSyv8R-TDm2XBmriANqhidxBHkQ8qPih3iu02S9MWt6RK_JdA@mail.gmail.com>
Date: Sat, 26 Mar 2016 10:01:07 +0100
Message-ID: 
 <CAFedD406c06p9qLuhVuCnkwLMs_3Qb4yptVtky1iqqy62_5UpQ@mail.gmail.com>
From: Luca Toscano <toscano.luca@gmail.com>
To: users@httpd.apache.org
Content-Type: multipart/alternative; boundary=001a11410bb6936c17052eefeb81
Subject: Re: [users@httpd] TLSv1.2

--001a11410bb6936c17052eefeb81
Content-Type: text/plain; charset=UTF-8

Hi!

2016-03-25 17:23 GMT+01:00 Leonay Wynn <lwkj328@gmail.com>:

> HI,
>
> I'm running RHEL 5.3. I upgraded my httpd version to Apache 2.4.18.
> configured with this: $ ./configure --prefix=/apps/httpd --enable-ssl
> --with-mpm=worker --enable-module=headers --enable-shared=headers
>
> All works well.
>
> I also installed OpenSSL 1.0.2g . I replaced my system installed openssl
> binary with the OpenSSL 1.0.2g.
>
> I updated my httpd-ssl.conf with
> SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384
> EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH
> EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP
> !PSK !SRP !DSS"
> SSLProtocol All -SSLv2 -SSLv3 +TLSv1.2
>
> when I try to start httpd it complains:
>
> SSLProtocol: Illegal protocol 'TLSv1.2'
>
> does anyone have a procedure to make this work or know what I'm doing
> incorrectly?
>

httpd is not picking up the new SSL lib (not binary), you could try with
the configure option --with-ssl=DIR to instruct mod_ssl.

Luca

--001a11410bb6936c17052eefeb81
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi!<br><div class=3D"gmail_extra"><br><div class=3D"gmail_=
quote">2016-03-25 17:23 GMT+01:00 Leonay Wynn <span dir=3D"ltr">&lt;<a href=
=3D"mailto:lwkj328@gmail.com" target=3D"_blank">lwkj328@gmail.com</a>&gt;</=
span>:<br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8=
ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-sty=
le:solid;padding-left:1ex"><div dir=3D"ltr"><div>HI,</div><div><br></div><d=
iv>I&#39;m running RHEL 5.3. I upgraded my httpd version to Apache 2.4.18.=
=C2=A0</div><div>configured with this: $ ./configure --prefix=3D/apps/httpd=
 --enable-ssl --with-mpm=3Dworker --enable-module=3Dheaders --enable-shared=
=3Dheaders</div><div><br></div><div>All works well.</div><div><br></div><di=
v>I also installed OpenSSL 1.0.2g . I replaced my system installed openssl =
binary with the OpenSSL 1.0.2g.</div><div><br></div><div>I updated my httpd=
-ssl.conf with </div><div>SSLCipherSuite &quot;EECDH+ECDSA+AESGCM EECDH+aRS=
A+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA=
+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EX=
P<br>!PSK !SRP !DSS&quot;<br>SSLProtocol All -SSLv2 -SSLv3 +TLSv1.2</div><d=
iv><br></div><div>when I try to start httpd it complains:</div><div><br></d=
iv><div>SSLProtocol: Illegal protocol &#39;TLSv1.2&#39;</div><div><br></div=
><div>does anyone have a procedure to make this work or know what I&#39;m d=
oing incorrectly?</div></div></blockquote><div><br></div><div>httpd is not =
picking up the new SSL lib (not binary), you could try with the configure o=
ption=C2=A0--with-ssl=3DDIR to instruct mod_ssl.</div><div><br></div><div>L=
uca</div><div><br></div><div>=C2=A0</div></div></div></div>

--001a11410bb6936c17052eefeb81--