19.8.3 Messages starting with AH : Security Management Guide

AH01876

mod_ssl/aa....aa compiled against Server: bb....bb cc....cc, Library: dd....dd

aa....aa: Product version

bb....bb: Product name

cc....cc: Product version

dd....dd: Information about the library

Description: This message outputs the information about the OpenSSL library and the information about the SSL module.

AH01883

Init: Initialized OpenSSL library

Description: The OpenSSL library will be initialized.

AH01887

Init: Initializing (virtual) servers for SSL

Description: The SSL settings of the server will be initialized.

AH01895

Unable to configure verify locations for client authentication

Description: A CA certificate to be used for client authentication could not be set. Does not start the Web server.
Action: Check and, if necessary, revise the specifications of the SSLCACertificateFile and SSLCACertificatePath directives.

AH01896

Unable to determine list of acceptable CA certificates for client authentication

Description: The list of CA certificates that can be used for client authentication could not be determined. Does not start the Web server.
Action: Check and, if necessary, revise the specifications of the SSLCACertificateFile and SSLCACertificatePath directives.

AH01897

Init: Oops, you want to request client authentication, but no CAs are known for verification!? [Hint: SSLCACertificate*]

Description: No CA required to verify client authentication exists. Continues processing to start the Web server.
Action: Check and, if necessary, revise the specifications of the SSLCACertificateFile and SSLCACertificatePath directives.

AH01898

Unable to configure permitted SSL ciphers

Description: The types of SSL encryption to be permitted could not be set. Does not start the Web server.
Action: Check and, if necessary, revise the specification of the SSLCipherSuite directive.

AH01899

Host aa....aa:bb....bb: CRL checking has been enabled, but neither SSLCARevocationFile nor SSLCARevocationPath is configured

aa....aa: Host name

bb....bb: Port number

Description: Although CRL checking is enabled, the SSLCARevocationFile is not specified. Does not start the Web server.
Action: Check and, if necessary, revise the specifications of the SSLCARevocationCheck and SSLCARevocationFile directives.

AH01901

Host aa....aa:bb....bb: unable to configure X.509 CRL storage for certificate revocation

aa....aa: Host name

bb....bb: Port number

Description: The CRL for revoking the certificate could not be set. Does not start the Web server.
Action: Check and, if necessary, revise the specification of the SSLCARevocationFile directive.

AH01902

Host aa....aa:bb....bb: X.509 CRL storage locations configured, but CRL checking (SSLCARevocationCheck) is not enabled

aa....aa: Host name

bb....bb: Port number

Description: Although the CRL storage location is set, CRL checking is not enabled. Continues processing to start the Web server.
Action: Revise the specification of the SSLCARevocationCheck directive to enable CRL checking.

AH01909

aa....aa:bb....bb:cc....cc server certificate does NOT include an ID which matches the server name

aa....aa: Host name

bb....bb: Port number

cc....cc: Index number

Description: The server certificate does not include any ID that matches the server name. Continues processing to start the Web server.
Action: Make sure that the server certificate matches the server name.

AH01914

Configuring server aa....aa:bb....bb for SSL protocol

aa....aa: Host name

bb....bb: Port number

Description: SSL settings will be specified for the server.

AH01915

Init: (aa....aa:bb....bb) You configured HTTPS(443) on the standard HTTP(80) port!

aa....aa: Host name

bb....bb: Port number

Description: Although SSL is enabled, the port number 80, which is the standard port number for the HTTP protocol, is set. Continues processing to start the Web server.
Action: Revise the port number specification of the port that the server uses to receive requests.

AH01916

Init: (aa....aa:bb....bb) You configured HTTP(80) on the standard HTTPS(443) port!

aa....aa: Host name

bb....bb: Port number

Description: Although SSL is disabled, the port number 443, which is the standard port number for the HTTPS protocol, is set. Continues processing to start the Web server.
Action: Revise the port number specification of the port that the server uses to receive requests.

AH01962

Unable to create a new SSL connection from the SSL context

Description: No SSL connection could be generated from the SSL context. Cannot connect via SSL.
Action: Take action according to the error message that is output together with this message.

AH01963

Unable to set session id context to 'aa....aa'

aa....aa: Data for identifying the server

Description: Data could not be set for the session ID context. Cannot connect via SSL.
Action: Take action according to the error message that is output together with this message.

AH01996

SSL handshake failed: HTTP spoken on HTTPS port; trying to send HTML error page

Description: An SSL handshake failed: The HTTPS port received an HTTP request.

AH01998

Connection closed to child aa....aa with abortive shutdown (server bb....bb:cc....cc)

aa....aa: Unique ID that identifies the server

bb....bb: Host name

cc....cc: Port number

Description: A connection to the server indicated by an ID was closed.

AH02011

No acceptable peer certificate available

Description: There are no client certificates that can be accessed.

AH02036

Faking HTTP Basic Auth header: "Authorization: aa....aa"

aa....aa: Header value

Description: Basic authentication using a client certificate will be performed.

AH02039

Certificate Verification: Error (aa....aa): bb....bb

aa....aa: Error number

bb....bb: Error string

Description: Client authentication failed. Stops the SSL request processing.

AH02040

Certificate Verification: Certificate Chain too long (chain has aa....aa certificates, but maximum allowed are only bb....bb)

aa....aa: Number of chained CA certificates

bb....bb: Value of the SSLVerifyDepth directive

Description: Certificate verification failed because the received client certificate is located deeper than the depth specified in the SSLVerifyDepth directive. Stops the SSL request processing.
Action: Check the value specified in the SSLVerifyDepth directive. If the client certificate is not accepted, no action is required.

AH02042

rejecting client initiated renegotiation

Description

A renegotiation request from the client was rejected.

Stops the SSL request processing.

AH02219

access to aa....aa failed, reason: SSL connection required

aa....aa: Requested file

Description: The path at which the SSLRequireSSL directive is specified was accessed without using SSL. The system returns the status code 403 Forbidden to the client and stops processing the request.

AH02231

No SSL protocols available [hint: SSLProtocol]

Description: No available protocols are specified in the SSLProtocol directive. Does not start the Web server.
Action: Check and, if necessary, revise the specification of the SSLProtocol directive.

AH02311

Fatal error initialising mod_ssl, exiting. See aa....aa for more information

aa....aa: Error log file name

Description: A fatal error occurred during initialization of mod_ssl. Does not start the Web server.
Action: In the error log file indicated in the message, find the message that has been output together with this message, and then review the cause of the error indicated in the message found.

AH02312

Fatal error initialising mod_ssl, exiting.

Description: A fatal error occurred during initialization of mod_ssl. Does not start the Web server.
Action: Review the cause of the error indicated in the message that has been output together with this message.

AH02562

Failed to configure certificate aa....aa:bb....bb:cc....cc (with chain), check dd....dd

aa....aa: Host name

bb....bb: Port number

cc....cc: Index number

dd....dd: Certificate file name

Description: A server certificate could not be set. Does not start the Web server.
Action: Review the certificate file specified in the SSLCertificateFile directive.

AH02564

Failed to configure encrypted (?) private key aa....aa:bb....bb:cc....cc, check dd....dd

aa....aa: Host name

bb....bb: Port number

cc....cc: Index number

dd....dd: Private key file name

Description: A server private key could not be set. Does not start the Web server.
Action: Review the server private key file specified in the SSLCertificateKeyFile directive.

AH02565

Certificate and private key aa....aa:bb....bb:cc....cc from dd....dd and ee....ee do not match

aa....aa: Host name

bb....bb: Port number

cc....cc: Index number

dd....dd: Certificate file name

ee....ee: Private key file name

Description: The server certificate and server private key are not paired correctly. Does not start the Web server.
Action: Revise the specifications of the SSLCertificateFile and SSLCertificateKeyFile directives so that a private key and certificate are set as a correct pair.

AH02568

Certificate and private key aa....aa:bb....bb:cc....cc configured from dd....dd and ee....ee

aa....aa: Host name

bb....bb: Port number

cc....cc: Index number

dd....dd: Certificate file name

ee....ee: Private key file name

Description: A server certificate and server private key were set.

AH02569

Illegal attempt to re-initialise SSL for server (SSLEngine On should go in the VirtualHost, not in global scope.)

Description: An illegal attempt was made to re-initialize the SSL settings for the server. Does not start the Web server.
Action: Check the SSL settings in the virtual host. (If SSL settings are enabled outside the virtual host, at least one SSL-related directive must be set inside the virtual host.)

AH02572

Failed to configure at least one certificate and key for aa....aa:bb....bb

aa....aa: Host name

bb....bb: Port number

Description: No server certificate and server private key are set. Does not start the Web server.
Action: To enable SSL, set at least one server certificate and server private key.

AH02576

Attempting to load encrypted (?) private key aa....aa:bb....bb:cc....cc

aa....aa: Host name

bb....bb: Port number

cc....cc: Index number

Description: A password-protected server private key will be loaded.

AH02577

Init: SSLPassPhraseDialog builtin is not supported on Win32 (key file aa....aa)

aa....aa: Server private key file name

Description: The Windows edition does not support an interactive interface for entering a password for a password-protected private key. Does not start the Web server.
Action: Consider canceling password protection for a server private key.

AH10104

aa....aa:bb....bb, SSLSrvConfigRec shared from cc....cc:dd....dd

aa....aa: Host name

bb....bb: Port number

cc....cc: Host name

dd....dd: Port number

Description: SSL settings are shared. Continues processing to start the Web server.
Action: Review the <VirtualHost> settings to determine whether SSL settings can be shared.