升级到 RHEL 8 后看到“SSL_CTX_use_certificate:ee key too small”错误
Issue
-
为什么 httpd 无法启动并显示“SSL Library Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small"?
/var/log/httpd/ssl_error_log
示例:AH02562: Failed to configure certificate www1.example.com:443:0 (with chain), check /etc/pki/tls/certs/server.crt SSL Library Error: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small
-
NGINX 无法启动,并显示“key too small”错误:
[emerg] SSL_CTX_use_certificate("/etc/nginx/certs/cert") failed (SSL: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small)
Environment
- Red Hat Enterprise Linux(RHEL) 8.x
- httpd-2.4.37
- Red Hat Software Collections(RHSCL)
- Red Hat JBoss Core Services(JBCS)
- Apache HTTPD
- mod_ssl
- NGINX
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.