Can't access Netsight in Firefox 39 due to weak ephemeral Diffie-Hellman key

  • 0
  • 2
  • Problem
  • Updated 2 years ago
  • Solved
Firefox 39 has deprecated some older and weaker SSL/TLS options for security reasons. I know how to work around this error with about:config options, but how do I fix the config on the NetSight server for everyone? I'm currently running 6.2.0.211. Poking around it seems to be running JBoss, which I'm not familiar with at all.

Full error:

An error occurred during a connection to netsight.xxx:8443. SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key)
Photo of James A

James A, Embassador

  • 6,982 Points 5k badge 2x thumb

Posted 3 years ago

  • 0
  • 2
Photo of Jason

Jason, Employee

  • 3,608 Points 3k badge 2x thumb
Official Response
James, 

This is an issue that was fixed in 6.2.0.221. An upgrade will resolve that. 

https://gtacknowledge.extremenetworks.com/articles/Solution/Server-has-a-weak-ephemeral-Diffie-Hellm...

Thanks, 
Jason