Tuesday, September 15, 2015

firefox chrome ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

Cannot access the application through the Chrome Browser. The message indicates it's a problem with the BMS server. The following message comes up:
 
 Server has a weak ephemeral Diffie-Hellman public key
 
 ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY
 Hide details
 This error can occur when connecting to a secure (HTTPS) server. It means that the server is trying to set up a secure connection but, due to a disastrous misconfiguration, the connection wouldn't be secure at all!

Solution:

Open Server.xml file in tomcat conf folder and Add the below line:-

ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
   TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA,
   TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,
   TLS_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_RC4_128_SHA"

InSide

<Connector port="443" maxThreads="200" scheme="https" secure="true" SSLEnabled="true" keystoreFile="XXX" keystorePass="XXX" keystoreType="PKCS12"  clientAuth="false" sslProtocol="TLS" "ADD CIPHERS HERE"  />

Restart Tomcat Server..  |||||