Seeing "SSL_CTX_use_certificate:ee key too small" error after upgrading to RHEL 8
Issue
-
Why does httpd fail to start with "SSL Library Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small"?
/var/log/httpd/ssl_error_log
sample:AH02562: Failed to configure certificate www1.example.com:443:0 (with chain), check /etc/pki/tls/certs/server.crt SSL Library Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
-
NGINX fails to start with "key too small" error:
[emerg] SSL_CTX_use_certificate("/etc/nginx/certs/cert") failed (SSL: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small)
-
On a RHEL-8 server on which
Red Hat Satellite 6
is installed, following error messages can be found in the/var/log/httpd/foreman-ssl_error_ssl.log
log file:[Tue Dec 19 12:58:05.891928 2023] [ssl:emerg] [pid 3366536] AH02561: Failed to configure certificate satellite123.example.com:443:0, check /etc/pki/katello/certs/katello-apache.crt [Tue Dec 19 12:58:05.894898 2023] [ssl:emerg] [pid 3366536] SSL Library Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
Environment
- Red Hat Enterprise Linux (RHEL) 8.x
- httpd-2.4.37
- Red Hat Software Collections (RHSCL)
- Red Hat JBoss Core Services (JBCS)
- Apache HTTPD
- mod_ssl
- NGINX
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.