title: https: Apache TLS renegotiation: Debian, Apache2, openssl. How to?
body: <p>On modern browsers, my site gets marked as sorta insecure: </p>
  
  <p>Google Chrome for example says "<strong><code>The server does not support the TLS renegotiation extension</code></strong>" in the "Page Information".</p>
  
  <p>HTTPS runs fine though, the connection is encrypted and the certificate is valid.</p>
  
  <pre><code># openssl version
  OpenSSL 0.9.8g 19 Oct 2007
  
  # cat /etc/debian_version
  5.0.6
  
  # apache2ctl -V
  Server version: Apache/2.2.9 (Debian)
  Server built:   Apr 20 2010 21:44:40
  Server's Module Magic Number: 20051115:15
  Server loaded:  APR 1.2.12, APR-Util 1.2.12
  Compiled using: APR 1.2.12, APR-Util 1.2.12
  Architecture:   64-bit
  Server MPM:     ITK
    threaded:     no
      forked:     yes (variable process count)
  Server compiled with....
   -D APACHE_MPM_DIR="server/mpm/experimental/itk"
   -D APR_HAS_SENDFILE
   -D APR_HAS_MMAP
   -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
   -D APR_USE_SYSVSEM_SERIALIZE
   -D APR_USE_PTHREAD_SERIALIZE
   -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
   -D APR_HAS_OTHER_CHILD
   -D AP_HAVE_RELIABLE_PIPED_LOGS
   -D DYNAMIC_MODULE_LIMIT=128
   -D HTTPD_ROOT=""
   -D SUEXEC_BIN="/usr/lib/apache2/suexec"
   -D DEFAULT_PIDLOG="/var/run/apache2.pid"
   -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
   -D DEFAULT_LOCKFILE="/var/run/apache2/accept.lock"
   -D DEFAULT_ERRORLOG="logs/error_log"
   -D AP_TYPES_CONFIG_FILE="/etc/apache2/mime.types"
   -D SERVER_CONFIG_FILE="/etc/apache2/apache2.conf"
  </code></pre>
  
  <p>I'm using the dotdeb repository for my LAMP setup, hence Apache 2.2.9.</p>
  
  <ul>
  <li><p>Is there something wrong with my
  server configuration? </p></li>
  <li><p>Or is there something wrong with the
  certificate in use?</p></li>
  <li><p>Where should I begin tracking down
  the issue?</p></li>
  </ul>