StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

POhttps: Apache TLS renegotiation: Debian, Apache2, openssl. How to?
text
Body
copied!<p>On modern browsers, my site gets marked as sorta insecure: </p> <p>Google Chrome for example says "<strong><code>The server does not support the TLS renegotiation extension</code></strong>" in the "Page Information".</p> <p>HTTPS runs fine though, the connection is encrypted and the certificate is valid.</p> <pre><code># openssl version OpenSSL 0.9.8g 19 Oct 2007 # cat /etc/debian_version 5.0.6 # apache2ctl -V Server version: Apache/2.2.9 (Debian) Server built: Apr 20 2010 21:44:40 Server's Module Magic Number: 20051115:15 Server loaded: APR 1.2.12, APR-Util 1.2.12 Compiled using: APR 1.2.12, APR-Util 1.2.12 Architecture: 64-bit Server MPM: ITK threaded: no forked: yes (variable process count) Server compiled with.... -D APACHE_MPM_DIR="server/mpm/experimental/itk" -D APR_HAS_SENDFILE -D APR_HAS_MMAP -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) -D APR_USE_SYSVSEM_SERIALIZE -D APR_USE_PTHREAD_SERIALIZE -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT -D APR_HAS_OTHER_CHILD -D AP_HAVE_RELIABLE_PIPED_LOGS -D DYNAMIC_MODULE_LIMIT=128 -D HTTPD_ROOT="" -D SUEXEC_BIN="/usr/lib/apache2/suexec" -D DEFAULT_PIDLOG="/var/run/apache2.pid" -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" -D DEFAULT_LOCKFILE="/var/run/apache2/accept.lock" -D DEFAULT_ERRORLOG="logs/error_log" -D AP_TYPES_CONFIG_FILE="/etc/apache2/mime.types" -D SERVER_CONFIG_FILE="/etc/apache2/apache2.conf" </code></pre> <p>I'm using the dotdeb repository for my LAMP setup, hence Apache 2.2.9.</p> <ul> <li><p>Is there something wrong with my server configuration? </p></li> <li><p>Or is there something wrong with the certificate in use?</p></li> <li><p>Where should I begin tracking down the issue?</p></li> </ul>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload