TLS clients can't connect to Apache with SSLCipherSuite -SSLv3

Solution Unverified - Updated -

Issue

  • After disabling SSLv3 ciphers in Apache, the following error appears when clients connect with TLS 1.0.
    SSL Library Error: 336109761 error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher Too restrictive SSLCipherSuite or using DSA server certificate?
  • TLSv1 clients can't connect to Apache when I use the following directive SSLCipherSuite ALL:-SSLv2:-SSLv3:+TLSv1:<other cipher specs>
  • Getting javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure at JBoss client when disabling SSLv3 ciphers in Apache which is acting as a server

Environment

  • Red Hat Enterprise Linux (RHEL)
    • 6.x
  • Red Hat JBoss Web Server (JWS)
  • Red Hat JBoss Enterprise Application Platform (EAP)
    • 6.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.