On Tue, Jul 18, 2000 at 07:10:47PM +0200, Andreas de Pretis wrote:
> Certificate and restarted. When connection via IE 5.01 (56 bit) or NS 4.7 (128
> bit) the connection refused and i get the following entry in my SSL-Engine
> Logfile:
>
> [18/Jul/2000 18:41:24 05805] [error] OpenSSL: error:1408A0C1:SSL
> routines:SSL3_GET_CLIENT_HELLO:no shared cipher [Hint: Too restrictive
> SSLCipherSuite or using DSA server certificate?]
...
> (the default values when doing a make certificate TYPO=custom within the Apache
> Source-Tree) and received a DSA with Signature Algorithm: dsaWithSHA1.
Don't know about IE, but Netscape does not support DSA ciphers, so you do
need a RSA certificate.
> Could anybody give me some hints/help. I hope i did nothing wrong, otherwise
> this would be damn wasted 125 USD :(
Netscape (and probably IE) don't like DSA certs. It's in the docs...
Best regards,
Lutz
--
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus Fax. +49 355 69-4153
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
