I want to use Anonymous Diffie-Hellman (ADH) ciphers, but I always get “no shared cipher\ errors?
ADH” into your SSLCipherSuite. Additionally you have to build OpenSSL with “-DSSL_ALLOW_ADH”. Because per default OpenSSL does not allow ADH ciphers for security reasons. So if you are actually enabling these ciphers make sure you are informed about the side-effects. • I always just get a ‘no shared ciphers’ error if I try to connect to my freshly installed server? [L] Either you have messed up your SSLCipherSuite directive (compare it with the pre-configured example in httpd.conf-dist) or you have choosen the DSA/DH algorithms instead of RSA under “make certificate” and ignored or overseen the warnings. Because if you have choosen DSA/DH, then your server no longer speaks RSA-based SSL ciphers (at least not until you also configure an additional RSA-based certificate/key pair). But current browsers like NS or IE only speak RSA ciphers. The result is the “no shared ciphers” error. To fix this, regenerate your server certificate/key pair and this time choose the RSA algorithm. • Why
