Right on - thank you. That lead to a whole bunch more errors but at least they are new! John ====== On Sat, 2023-11-18 at 12:46 -0800, rakesh r wrote: > make sure you have installed mod_ssl. > > Thanks > Rakesh > > On Sat, Nov 18, 2023 at 12:43 PM John <john.iliffe@xxxxxxxxx> wrote: > > > > I'm trying to bring up Apache on a new server running Rocky Linux 9.1 and also upgrade the > > version > > of Apache from 2.4.25 to current. > > > > I have installed a .pem format certificate and when I try to start Apache I get this error: > > ---- > > Starting The Apache HTTP Server... > > httpd[12399]: AH00526: Syntax error on line 11 of /etc/httpd/conf.d/coax.conf: > > httpd[12399]: Invalid command 'SSLEngine', perhaps misspelled or defined by a module not > > included in > > the server configuration > > systemd[1]: httpd.service: Main process exited, code=exited, status=1/FAILURE > > systemd[1]: httpd.service: Failed with result 'exit-code'. > > systemd[1]: Failed to start The Apache HTTP Server. > > ---- > > To me SSLEngine looks properly coded and the same configuration worked on the previous server. > > Here > > is what I have: > > > > <Virtualhost *:443> > > ServerName www.example.ca > > ServerAlias t.example.ca > > DocumentRoot /usr/httpd/example > > Options -MultiViews > > H2Direct on > > ProxyPassMatch "^/.*\.php(/.*)?$" fcgi://127.0.0.1:9002/usr/httpd/example > > SSLEngine on > > SSLCipherSuite HIGH: !ADH: !SSLv2: !SSLv3: !TLSv1: !aNULL: !eNULL: !RC4: !PSK: !MD5 > > SSLCertificateFile /etc/httpd/conf/sslcert/www.example.pem > > SSLCertificateKeyFile /etc/httpd/conf/sslcert/www.example.ca.key > > SSLCACertificateFile /etc/httpd/conf/sslcert/intermediate.crt > > SSLHonorCipherOrder on > > Header always set Strict-Transport-Security "max-age-63072000;includeSubDomains" > > </VirtualHost> > > > > This looks to me like I missed something in the upgrade but hours of searching the documentation > > haven't given me any possibilities. Any ideas would be appreciated! > > > > John > > ====== > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|