UNSOLVED

jemimus

updated

11 years ago

J

jemimus

25 Posts

0

5211

September 9th, 2015 05:00

Chrome: "server has a weak ephemeral Diffie-Hellman public key"

From this morning onwards I am unable to use Chrome to connect with the Vplex management interface. Firefox displays the same error but may have been doing so longer.

Interestingly enough, I can connect fine with Microsoft Edge browser

Chrome: "server has a weak ephemeral Diffie-Hellman public key"

Firefox: "An error occurred during a connection to 10.1.0.28. SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key) "

I can, of course, work around this by disabling the cypher-suite check in Chrome/Firefox.

We are running the following version:

Product Version                  5.3.0.02.00.05  -

SMSv2                            D30.60.0.12.0   -

Mgmt Server Base                 D30.60.0.5      -

Mgmt Server Software             D30.60.0.16     -

Cluster Witness Server Software  D30.60.0.10     Built against GeoSynchrony version - 60.1.218.0-0

I am wondering if the default cypher-suites used by SSL in the webclient where updated in 5.4 ?

If so, I can push the customer to update to latest version for this reason.

SNAG-0217.jpg