Too restrictive SSLCipherSuite

2000-07-19 Thread Andreas de Pretis
] OpenSSL: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher [Hint: Too restrictive SSLCipherSuite or using DSA server certificate?] Apache is 1.3.12 with latest mod_ssl, OpenSSL and EAPI unter SuSE-Linux 6.2 with Kernel 2.2.14. OpenSSL is configured with no-idea and no RSAref (cause

Too restrictive SSLCipherSuite

2000-07-18 Thread Andreas de Pretis
] OpenSSL: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher [Hint: Too restrictive SSLCipherSuite or using DSA server certificate?] Apache is 1.3.12 with latest mod_ssl, OpenSSL and EAPI unter SuSE-Linux 6.2 with Kernel 2.2.14. OpenSSL is configured with no-idea and no RSAref (cause

Re: Too restrictive SSLCipherSuite

2000-07-18 Thread Lutz Jaenicke
:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher [Hint: Too restrictive SSLCipherSuite or using DSA server certificate?] ... (the default values when doing a make certificate TYPO=custom within the Apache Source-Tree) and received a DSA with Signature Algorithm: dsaWithSHA1. Don't know about

Re: Too restrictive SSLCipherSuite

2000-07-18 Thread Mads Toftum
On Tue, Jul 18, 2000 at 07:55:24PM +0200, Lutz Jaenicke wrote: Don't know about IE, but Netscape does not support DSA ciphers, so you do need a RSA certificate. IE doesn't support DSA certs. vh Mads Toftum -- `Darn it, who spiked my coffee with water?!' - lwall

AW: Too restrictive SSLCipherSuite

2000-07-18 Thread Andreas de Pretis
Thanks to everybody for your help ... connecting with openssl works fine and SSLLogLevel Debug brings not much more ... but, nevertheless i'll do a new rollout with an RSA encrypted key. If IE doesn't support DSA it's useless for me. Best regards, Andreas Don't know about IE, but Netscape