Gentoo Archives: gentoo-user

From: thelma@×××××××××××.com
To: Gentoo mailing list <gentoo-user@l.g.o>
Subject: Re: [gentoo-user] apache SSL error
Date: Wed, 06 Jan 2016 04:14:58
Message-Id: 568C94B6.1010508@sys-concept.com
In Reply to: [gentoo-user] apache SSL error by thelma@sys-concept.com
1 On 01/05/2016 08:45 PM, thelma@×××××××××××.com wrote:
2 > I changed in apache: 00_default_ssl_vhost.conf
3 >
4 > SSLProtocol ALL -SSLv2 -SSLv3
5 > SSLHonorCipherOrder on
6 > SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-GCM-SHA256:AES256+EDH:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DH$
7 >
8 > and now apache will not start. Error:
9 > Unable to configure permitted SSL ciphers
10 > error] SSL Library Error: 151441516 error:0906D06C:PEM routines:PEM_read_bio:no start line Bad file contents or format - or even just a forgotten SSLCertificateKeyFile?
11 > [error] SSL Library Error: 151441516 error:0906D06C:PEM routines:PEM_read_bio:no start line Bad file contents or format - or even just a forgotten SSLCertificateKeyFile?
12 > [error] SSL Library Error: 336486680 error:140E6118:SSL routines:SSL_CIPHER_PROCESS_RULESTR:invalid command
13 >
14 >
15 > I re-emerge dev-libs/openssl
16 > but it deosn't help. Which one I need to re-emerge?
17
18 Fixed, I didn't copy correctly the "SSLCipherSuite..."