Server has a weak ephemeral diffie-hellman public key err_ssl_weak_server_ephemeral_dh_key
CoderLegion
Posted on March 13, 2022
"Server has a weak ephemeral diffie-hellman public key err_ssl_weak_server_ephemeral_dh_key"
I guess Chrome have released an update over the past week.
And this update has caused at least 100 of our internal applications to throw the exception shown below. The solutions I have found over the Internet, talk about updating the application server with a stronger cipher.
But, our applications are spread out over various different servers like IIS, tomcat, jboss, weblogic and websphere. So it is not practical solution for me to expect all of these application servers to be updated. Is there any way to get Chrome to allow an
"exception" for these sites ? As these sites are all our internal sites, so the security is not really a concern for us.
Firefox also throws the same exception but there is a documented fix for that by simply changing some settings in Firefox. Is there anyone who is aware of a similar fix in Chrome?
Error
Server has a weak ephemeral Diffie-Hellman public key
ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY
Solution :
Of "Server has a weak ephemeral diffie-hellman public key err_ssl_weak_server_ephemeral_dh_key"
I had also faced the same issue recently.
After doing research I found the solution on it.
I have solved this problem without upgrading jrockit but by simply configuring the ssl section like follows :
`
true
false
500
false
false
true
BuiltinSSLValidationOnly
BuiltinSSLValidationOnly
false
false
true
`
It solved many different problems on SSL with chrome. I hope it will help you too in resolving your issue.
Posted on March 13, 2022
Join Our Newsletter. No Spam, Only the good stuff.
Sign up to receive the latest update from our blog.
Related
March 13, 2022