[BlueOnyx:13673] base-apache-* updates blew out admsrv

Christoph Schneeberger cschnee at box.telemedia.ch
Fri Sep 13 02:26:17 -05 2013


Good morning,

Tonite a few base-apache packages on our 5106R have been updated. All 
those that I have tested yet have a dead admsrv after the update.
The cause seems to be an unintentional line break in the 
"SSLCipherSuite" statement.

So if you can't access your 5106R admsrv this morning, just fix 
/etc/admserv/conf.d/ssl.conf:

Change these 2 lines:

SSLCipherSuite
ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:!ECDHE-RSA-RC4-SHA:!TLS_RSA_WITH_RC4_128_SHA:TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA:TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA:TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA:AES128-GCM-SHA256:RC4:TLS_ECDHE_RSA_WITH_RC4_128_SHA:HIGH:!aNULL:!eNULL:!EXP:!LOW:!MD5:!RC4 


into one line

SSLCipherSuite ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128- ....etc.

This fixed it on the three boxes I could check yet.

Hope this helps.

Cheers,
Christoph



More information about the Blueonyx mailing list