Re: [users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-23 Thread Jim Albert
On 6/23/2021 8:06 PM, Pavel Heimlich, a.k.a. hajma wrote: st 23. 6. 2021 v 23:06 odesílatel Otis Dewitt - NOAA Affiliate napsal: Check your Openssl ciphers to see if it supports TLS 1.2 Try: SSLProtocol -ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 +TLSv1.2 SSLCipherSuite   HIGH:!aNU

Re: [users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-23 Thread Otis Dewitt - NOAA Affiliate
What does the /var/log/httpd/error_log say? Paste that. On Wed, Jun 23, 2021 at 8:06 PM Pavel Heimlich, a.k.a. hajma < tropikha...@gmail.com> wrote: > st 23. 6. 2021 v 23:06 odesílatel Otis Dewitt - NOAA Affiliate > napsal: > >> Check your Openssl ciphers to see if it supports TLS 1.2 >> Try: >

Re: [users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-23 Thread Pavel Heimlich, a.k.a. hajma
st 23. 6. 2021 v 23:06 odesílatel Otis Dewitt - NOAA Affiliate napsal: > Check your Openssl ciphers to see if it supports TLS 1.2 > Try: > > SSLProtocol -ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 +TLSv1.2 > SSLCipherSuite > > HIGH:!aNULL:!eNULL:!kECDH:!aDH:!RC4:!3DES:!CAMELLIA:!MD5:!AES256-SHA:!AES128-

Re: [users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-23 Thread Otis Dewitt - NOAA Affiliate
Check your Openssl ciphers to see if it supports TLS 1.2 Try: SSLProtocol -ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 +TLSv1.2 SSLCipherSuite HIGH:!aNULL:!eNULL:!kECDH:!aDH:!RC4:!3DES:!CAMELLIA:!MD5:!AES256-SHA:!AES128-SHA256:!AES256-SHA256:!AES256-GCM-SHA384:!AES128-SHA:!AES128-SHA:!AES128-GCM-SHA256:!A

[users@httpd] mod_ssl: http to https ErrorDocument redirect stops working when only TLSv1.2 specified

2021-06-23 Thread Pavel Heimlich, a.k.a. hajma
Hi, I use ErrorDocument 400 "https://myserver:215"; to achieve redirection to secure connection for anyone who would access my server with just 'http://myserver:215'. This works as long as there's SSLProtocol TLSv1.1 +TLSv1.2 specified in the configuration. However when I change that to just SSLPr