Too restrictive SSLCipherSuite

2000-07-19 Thread Andreas de Pretis
] OpenSSL: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher [Hint: Too restrictive SSLCipherSuite or using DSA server certificate?] Apache is 1.3.12 with latest mod_ssl, OpenSSL and EAPI unter SuSE-Linux 6.2 with Kernel 2.2.14. OpenSSL is configured with no-idea and no RSAref (cause

AW: Too restrictive SSLCipherSuite

2000-07-18 Thread Andreas de Pretis
Thanks to everybody for your help ... connecting with openssl works fine and SSLLogLevel Debug brings not much more ... but, nevertheless i'll do a new rollout with an RSA encrypted key. If IE doesn't support DSA it's useless for me. Best regards, Andreas > > Don't know about IE, but Netscape

Re: Too restrictive SSLCipherSuite

2000-07-18 Thread Mads Toftum
On Tue, Jul 18, 2000 at 07:55:24PM +0200, Lutz Jaenicke wrote: > > Don't know about IE, but Netscape does not support DSA ciphers, so you do > need a RSA certificate. > IE doesn't support DSA certs. vh Mads Toftum -- `Darn it, who spiked my coffee with water?!' - lwall __

Re: Too restrictive SSLCipherSuite

2000-07-18 Thread Lutz Jaenicke
OpenSSL: error:1408A0C1:SSL > routines:SSL3_GET_CLIENT_HELLO:no shared cipher [Hint: Too restrictive > SSLCipherSuite or using DSA server certificate?] ... > (the default values when doing a make certificate TYPO=custom within the Apache > Source-Tree) and received a DSA with Signature Alg

Too restrictive SSLCipherSuite

2000-07-18 Thread Andreas de Pretis
] OpenSSL: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher [Hint: Too restrictive SSLCipherSuite or using DSA server certificate?] Apache is 1.3.12 with latest mod_ssl, OpenSSL and EAPI unter SuSE-Linux 6.2 with Kernel 2.2.14. OpenSSL is configured with no-idea and no RSAref (cause