Apache error need help!

General support questions
staytech
Posts: 6
Joined: 2018/04/04 22:11:56
Location: Chicago, IL

Re: Apache error need help!

Post by staytech » 2018/04/05 01:40:11

If it's not to much trouble, could you show me an example of how the file(s) should be setup?

User avatar
TrevorH
Site Admin
Posts: 33220
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Apache error need help!

Post by TrevorH » 2018/04/05 08:24:23

I've checked one of my systems and in /etc/httpd/conf.d/ssl.conf I have changed the following items:

Code: Select all

-SSLProtocol all -SSLv2
+SSLProtocol all -SSLv2 -SSLv3
-SSLCipherSuite DEFAULT:!EXP:!SSLv2:!DES:!IDEA:!SEED:+3DES
+SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
-SSLCertificateFile /etc/pki/tls/certs/localhost.crt
+SSLCertificateFile /etc/httpd/conf.d/ssl.d/mycompany.pem
-SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
+SSLCertificateKeyFile /etc/httpd/conf.d/ssl.d/mycompany.pem
-#SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt
+SSLCACertificateFile /etc/httpd/conf.d/ssl.d/sslcompany-intermediatecert.pem
The files in /etc/httpd/conf.d/ssl.d/ were all copied there using cp and are chmod 640, chown root:apache.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Post Reply