ssl - Diffie-Hellman public key error with Tomcat 7 -


i set 2 ubuntu machines tomcat , ssl certificates. followed same procedure centos 6, i'm getting when i'm trying connect server (using opera):

server has weak, ephemeral diffie-hellman public key

the connector following, , there no errors in catalina.log:

<connector port="some port number"              protocol="org.apache.coyote.http11.http11protocol"             sslenabled="true"            maxthreads="150" scheme="https" secure="true"            clientauth="false" sslprotocol="tls"            keystorefile="path jks"            keystoretype="jks"            keystorepass="mypass1"            keypass="mypass2"  />  

with firefox, untrusted communication error.

for me worked after adding list of allowed ciphers tomcat configuration in conf/server.xml disable weak diffie-hellman ciphers:

    <connector         ...         ciphers="tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha256,tls_rsa_with_aes_256_cbc_sha"         ... 

Comments

Popular posts from this blog

How to connect android app to App engine -

gcc - MinGW's ld cannot perform PE operations on non PE output file -

php - display validation error message next to the textbox in codeigniter -