Re: [users@httpd] Apache 2.2 and tls 1.2

2020-07-23 Thread Tom Browder
On Thu, Jul 23, 2020 at 12:51 Tom Jubb wrote: > Understood. Just trying to exhaust all possible solutions before doing an OS > upgrade. FYI, I recently completed a local src build of Apache 2.4.43 (and APR and APR-UTIL), and OpenSSL 1.1.1g on Debian 10 Buster. I have documented the process on

Re: [users@httpd] Apache 2.2 and tls 1.2

2020-07-23 Thread Tom Jubb
brought up in a SuSE listerv and not the general Apache listserv. From: Dennis Clarke Sent: Thursday, July 23, 2020 12:59 PM To: users@httpd.apache.org Subject: Re: [users@httpd] Apache 2.2 and tls 1.2 On 7/23/20 4:41 PM, Tom Jubb wrote: > New ce

Re: [users@httpd] Apache 2.2 and tls 1.2

2020-07-23 Thread Dennis Clarke
On 7/23/20 4:41 PM, Tom Jubb wrote: > New certs will successfully installed on Apache 2.2 Apache 2.2 ? That was End of Life a while ago. You have a bigger problem. Migrate to 2.4.43 and then deal with certs and such. -- Dennis Clarke RISC-V/SPARC/PPC/ARM/CISC UNIX and Linux spoken GreyBeard

[users@httpd] Apache 2.2 and tls 1.2

2020-07-23 Thread Tom Jubb
New certs will successfully installed on Apache 2.2 but browsers now compain as they are not tls 1.2 compliant: https://www.ssllabs.com/ssltest/analyze.html?d=mail.gg-law.com=on So, my consultant said we needed to change Apache to use mod_nss instead of mod_ssl to enable TLS. install mod_nss