Right on - thank you.  That lead to a whole bunch more errors but at least they 
are new!

John
======
On Sat, 2023-11-18 at 12:46 -0800, rakesh r wrote:
> make sure you have installed mod_ssl.
> 
> Thanks
> Rakesh
> 
> On Sat, Nov 18, 2023 at 12:43 PM John <john.ili...@iliffe.ca> wrote:
> > 
> > I'm trying to bring up Apache on a new server running Rocky Linux 9.1 and 
> > also upgrade the
> > version
> > of Apache from 2.4.25 to current.
> > 
> > I have installed a .pem format certificate and when I try to start Apache I 
> > get this error:
> > ----
> > Starting The Apache HTTP Server...
> > httpd[12399]: AH00526: Syntax error on line 11 of 
> > /etc/httpd/conf.d/coax.conf:
> > httpd[12399]: Invalid command 'SSLEngine', perhaps misspelled or defined by 
> > a module not
> > included in
> > the server configuration
> > systemd[1]: httpd.service: Main process exited, code=exited, 
> > status=1/FAILURE
> > systemd[1]: httpd.service: Failed with result 'exit-code'.
> > systemd[1]: Failed to start The Apache HTTP Server.
> > ----
> > To me SSLEngine looks properly coded and the same configuration worked on 
> > the previous server. 
> > Here
> > is what I have:
> > 
> > <Virtualhost *:443>
> >    ServerName www.example.ca
> >         ServerAlias t.example.ca
> >    DocumentRoot /usr/httpd/example
> >    Options -MultiViews
> >    H2Direct on
> >    ProxyPassMatch "^/.*\.php(/.*)?$" fcgi://127.0.0.1:9002/usr/httpd/example
> >    SSLEngine on
> >    SSLCipherSuite HIGH: !ADH: !SSLv2: !SSLv3: !TLSv1: !aNULL: !eNULL: !RC4: 
> > !PSK: !MD5
> >    SSLCertificateFile /etc/httpd/conf/sslcert/www.example.pem
> >    SSLCertificateKeyFile /etc/httpd/conf/sslcert/www.example.ca.key
> >    SSLCACertificateFile /etc/httpd/conf/sslcert/intermediate.crt
> >    SSLHonorCipherOrder on
> >    Header always set Strict-Transport-Security 
> > "max-age-63072000;includeSubDomains"
> > </VirtualHost>
> > 
> > This looks to me like I missed something in the upgrade but hours of 
> > searching the documentation
> > haven't given me any possibilities.  Any ideas would be appreciated!
> > 
> > John
> > ======
> > 
> > 
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> > For additional commands, e-mail: users-h...@httpd.apache.org
> > 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Reply via email to