| 1. |
Why Do I Get A ’no Shared Ciphers’ Error When Connecting To My Newly Installed Server? |
|
Answer» Either you have made a MISTAKE with your SSLCIPHERSUITE directive (compare it with the pre-configured example in extra/httpd-SSL.conf) or you chose to use DSA/DH algorithms instead of RSA when you generated your private key and ignored or overlooked the warnings. If you have chosen DSA/DH, then your SERVER cannot communicate using RSA-based SSL ciphers (at least until you configure an additional RSA-based certificate/key pair). Modern browsers like NS or IE can only communicate over SSL using RSA ciphers. The result is the "no shared ciphers" error. To FIX this, regenerate your server certificate/key pair, using the RSA ALGORITHM. Either you have made a mistake with your SSLCIPHERSUITE directive (compare it with the pre-configured example in extra/httpd-ssl.conf) or you chose to use DSA/DH algorithms instead of RSA when you generated your private key and ignored or overlooked the warnings. If you have chosen DSA/DH, then your server cannot communicate using RSA-based SSL ciphers (at least until you configure an additional RSA-based certificate/key pair). Modern browsers like NS or IE can only communicate over SSL using RSA ciphers. The result is the "no shared ciphers" error. To fix this, regenerate your server certificate/key pair, using the RSA algorithm. |
|