This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Weak Diffie-Hellman (DH) key exchange parameters?

Hi
I tested my domain SSL setup at https://www.ssllabs.com

I got points deducted for
"This server supports weak Diffie-Hellman (DH) key exchange parameters. Grade capped to B."

Is there a way to disable support for this?

This thread was automatically locked due to age.

0 Scott_Klassen over 9 years ago

If this is an HTTPS connection through WAF, upgrade the certificate used to 2048 bit or more.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

Looks to be fixed in 9.314.

35070 SSL VPN: change default DH key size to 2048 and add key size 3072/4096

Of course will need to regenerate certs for an existing setup.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel