[Ach] Apache configuration for RHEL

Axel Hübl axel.huebl at web.de
Fri Mar 7 13:20:06 CET 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Oh crap Wolfgang, you are right.

I mismatched the 2.2.16 vs 2.2.22 packages in debian:
  https://packages.debian.org/squeeze/apache2

only the latter (in squeeze) support TLSv1.2

You are of course right, he will depend on OpenSSL 1.0.1e+
  https://httpd.apache.org/docs/trunk/mod/mod_ssl.html

Thanks for the update,
Axel

On 07.03.2014 11:34, Wolfgang Breyha wrote:
> Axel Hübl wrote, on 07/03/14 09:53:
>> Hey Sam,
>> 
>> I think 2.2.x has no chance in using tls 1.2 - even if it sounds 
>> stupid I would rather recommend upgrading to a newer rhel. It's
>> the same problem for the current debian oldstable :)
> 
> 2.2.x has no problem using TLSv1.2 at all. 2.2.26 even enables
> ECDHE. It depends on openssl.
> 
> After RH updated openssl to 1.0.1e the 2.2.15 rpm provided works
> with TLSv1.2 out of the box.
> 
> And it's easy to build a RHEL 2.2.15 RPM with mod_ssl from 2.2.26
> to get ECDHE on RHEL 6.5, too.
> 
> Greetings, Wolfgang
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQJ8BAEBCgBmBQJTGbl2XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRDMjAzN0EzNzlGM0JGMzFGQ0VFOTJDNENE
RDNGNjFFNUYxMTMyRjY1AAoJEN0/YeXxEy9lgw8P/iPsIDqAoz83gcCeq7RYWrOQ
cbSVaMdeWxHAqghKZmtu+cQxsJKlDpTMr5s6gzjz96kovVw0KweO0y2INaeP1rhe
Z3er7PbQ3aJbpkNQEAzjbfgRX6jFpX7pVaGkCp39CT9UAS+OwAUzWAwSGQQpTB7v
ZHgIx7o2neZT2pCo7YjHhixQvfx8ySuuSv3y4ql4Sk/jcDir8XrMsAplNl47tBi8
8ZCxicF+/A6z88/sGr/tSoHUNx/qJBKrmTM2LRWhUTEIVt7XbrfaHGk4gCAh5sj1
7Lxs37peFHrFshbMeN1LXWSkqMTyi5SZBUAyoW36NoTI5MFHurliRuOi+D2511pS
wLIEiZnSndNhmZO1hHReIQVn9RaLvCntwSvdrqVtM3CAiBad08sLjDPdD0rqsLvd
2dQL5/o9eNvRq3KFnlBtoViXyhgtmLSSwOwa8dubQRddavgE43iNRF0g2XQ02JBn
HVZZ4wn+bVG4rBCnMPbhLSOqScLk2ZST8OKCLGiQWfmkUoMQciHkxYUOwYF2evV7
q2yzeCUgVcgxTLAMuyj1x8r1WOGTvth39J1DgfcuCCUhHM1AvTnjc+6d5luQSykn
7HqFn0G28lITv6DCTb0LG2dg+E9IAxrtaq8TY7SMM7LrpKT0n0HZAZ9JUEARY3l7
qz2Wp3DnqWvxsILD+EQR
=U6cl
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3740 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.cert.at/pipermail/ach/attachments/20140307/1a184731/attachment.bin>


More information about the Ach mailing list