View previous topic :: View next topic |
Author |
Message |
lyallp Veteran
![Veteran Veteran](/images/ranks/rank_rect_5_vet.gif)
![](images/avatars/12785226974110e85e73ae3.jpg)
Joined: 15 Jul 2004 Posts: 1594 Location: Adelaide/Australia
|
Posted: Mon Feb 05, 2024 11:42 am Post subject: [Solved] apache failing to start - err diag in ssl_error_log |
|
|
I rebooted my Gentoo linux desktop machine, for no particular reason for the first time in a week or so.
Now, my apache server does not start.
After some searching, I finally found an error message in /var/log/apache/ssl_error_log
Code: |
AH02562: Failed to configure certificate Lyalls-PC:443:0 (with chain), check /etc/ssl/apache2/server.crt
SSL Library Error: error:0A00018F:SSL routines::ee key too small
|
I tried simply re-emerging apache, hoping that this would sort the problem out.
I tried renewing my certs with Lets Encrypt using the certbot.sh script.
It's something to do with my self signed certifcates being too small, which, quite frankly, I couldn't give a toss about.
If I knew how to set my SSL Security level down so this problem would go away, I would.
What do I have to do to get things going again?
Assistance would be appreciated.
Latest stable desktop Gentoo.
Apache 2.4.58
OpenSSL 3.2.1-r1 _________________ ...Lyall
Last edited by lyallp on Mon Feb 05, 2024 12:10 pm; edited 1 time in total |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
lyallp Veteran
![Veteran Veteran](/images/ranks/rank_rect_5_vet.gif)
![](images/avatars/12785226974110e85e73ae3.jpg)
Joined: 15 Jul 2004 Posts: 1594 Location: Adelaide/Australia
|
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
lyallp Veteran
![Veteran Veteran](/images/ranks/rank_rect_5_vet.gif)
![](images/avatars/12785226974110e85e73ae3.jpg)
Joined: 15 Jul 2004 Posts: 1594 Location: Adelaide/Australia
|
Posted: Thu Feb 15, 2024 3:52 am Post subject: |
|
|
Additional info, I went to the LetsEncrypt apache configuration - and it appears my LetsEncrypt config was lost somehow.
Following the settings in LetsEncrypt fixed my problem, meaning I did not have to re-build my local certificates, which are untrusted externally. _________________ ...Lyall |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|