NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Problem with httpd and openssl on NetBSD-7.1


I'm using NetBSD-7.1 (i386) and am trying to get (bozo)httpd (in the
base) and openssl to work well together. My certificates are from Let's
Encrypt: they're fine (I also use them for secure mail
connections). Here's what I'm experiencing with httpd:

- When I try to connect to my site via https using Firefox, Firefox
  gives the error message: "Cannot communicate securely with peer: no
  common encryption algorithm(s). Error code:

- However, using the SSL Checker of, everything seems
  okay (four green checkmarks, no warnings).

- Using the SSL Server Test of, I get an overall rating of
  A- with the remark: "The server does not support Forward Secrecy with
  the reference browsers. Grade reduced to A-." The detailed report also
  confirms that any recent version of Firefox will fail: "Server sent
  fatal alert: handshake_failure"

My conclusion is that the lack of Forward Secrecy is the culprit
here. What I don't know is whether there's anything that I can do about
this. Two questions:

(i) Can anyone reproduce this behavior?

(ii) Is there an easy way to solve this problem? (Short of using another
web server!)

Any feedback would be appreciated!


Home | Main Index | Thread Index | Old Index