I am trying to fully support forward secrecy on my FreeBSD Apache 2.4.16 server. I am using the correct cipher suite as the same cipher order works correctly on a different FreeBSD server. However, when I attempt to SSL test the server, the ECDHE cipher suites do not appear, even though running openssl ciphers shows that they exist.

What could be the cause for this?

The configured ciphers are these:


  • What's your ciphers config string? Mar 15, 2016 at 5:42
  • @StackzOfZtuff updated original post with cipher suite
    – ashin999
    Mar 15, 2016 at 6:06
  • What kind of certificate did you install? RSA or ECDSA? Mar 15, 2016 at 7:13
  • @StackzOfZtuff RSA. Would that be the cause?
    – ashin999
    Mar 15, 2016 at 7:36
  • @StackzOfZtuff I just confirmed that it is an issue with Apache or Openssl, and not virtualhost specific. I installed a different certificate on a different subdomain, and the issue persists.
    – ashin999
    Mar 15, 2016 at 8:00

1 Answer 1


The root of the issue seems to occur with the mod_security2 2.9.0 module that I was using. It doesn't like ECDHE so it doesn't allow it.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .