Uploaded image for project: 'FreePBX'
  1. FreePBX
  2. FREEPBX-22252

Apache fails to load when TLSv1.3 support enabled in Sysadmin V15.0.21.16+

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 15.0.21.16
    • Fix Version/s: None
    • Labels:
      None
    • Sprint:
      Sprint 45
    • ToDo:
    • Distro:
      FreePBX Distro

      Description

      System Admin v15.0.21.16 introduced a way to configure TLS protocols in Apache.  If TLSv1.3 is enabled then Apache reports the following error when it is restarted:  

      SSLProtocol: Illegal protocol 'TLSv1.3'
      httpd.service: main process exited, code=exited, status=1/FAILURE

      As I understand it Centos 7 doesn't support TLS1.3 as the version of OpenSSL it uses is too old and support has not been back ported.  I am using a fully patched version of SNG7.
       
       
       
       
       

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                fdanard Franck Danard [X] (Inactive)
                Reporter:
                gsiemon gsiemon
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  NextupJiraPlusStatus

                  Error rendering 'slack.nextup.jira:nextup-jira-plus-status'. Please contact your Jira administrators.