ssl - Diffie-Hellman public key error with Tomcat 7 -
i set 2 ubuntu machines tomcat , ssl certificates. followed same procedure centos 6, i'm getting when i'm trying connect server (using opera):
server has weak, ephemeral diffie-hellman public key
the connector following, , there no errors in catalina.log:
<connector port="some port number" protocol="org.apache.coyote.http11.http11protocol" sslenabled="true" maxthreads="150" scheme="https" secure="true" clientauth="false" sslprotocol="tls" keystorefile="path jks" keystoretype="jks" keystorepass="mypass1" keypass="mypass2" /> with firefox, untrusted communication error.
for me worked after adding list of allowed ciphers tomcat configuration in conf/server.xml disable weak diffie-hellman ciphers:
<connector ... ciphers="tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha256,tls_rsa_with_aes_256_cbc_sha" ...
Comments
Post a Comment