Christian Guenther wrote:

Hi list,

after successfully solving my problem with the logging (see thread problems with openca_rc start) I ran
into the next error. I start my RA by issuing ./openca_rc start and everything works beautiful, but when I try
to connect to the wesite (https://hostname/ra/) I receive this error message:


Error Aborting connection - you are using a too short symmetric keylength ().
General Error. 6251043.


look - what your browser shows - as the used bitlength for the securing of https... i have disabled the low in apache - so usaly that means - your used symmetric key is shorter than 128bit

or for testing - just set it to http ;o) - and the other parameters to zero instead of the default values

you find this in etc/access_control/*.xml

there is a section:
        <channel>
            <type>mod_ssl</type>
            <protocol>.*</protocol>
            <source>.*</source>
            <asymmetric_cipher>.*</asymmetric_cipher>
            <asymmetric_keylength>0</asymmetric_keylength>
            <symmetric_cipher>.*</symmetric_cipher>
            <symmetric_keylength>0</symmetric_keylength>
        </channel>

it its like this - you can use it with anything (http/https) and so on... so set it for first steps to this - should avoid problems

the type can still be mod_ssl shouldn't be a problem

greetings
dalini


------------------------------------------------------- This SF.Net email is sponsored by Sleepycat Software Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver higher performing products faster, at low TCO. http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3 _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to