https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/make-netsight-can-be-browsed-with-chrome-45/m-p/28153#M2634 After Chrome upgrade to version 45, NetSight can not be browsed with the following error message,<BR /> ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY<BR /> <BR /> I found a way to modify the tomcat's server.xml file, <BR /> change cipher parameter from<BR /> ciphers="${enterasys.tomcat.ciphers}"<BR /> to<BR /> ciphers="TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,<BR /> TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384,<BR /> TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA"<BR /> <BR /> The server.xml file can be found as the following path,<BR /> /usr/local/Extreme_Networks/NetSight/jboss/server/default/deploy/jbossweb-tomcat55.sar/server.xml<BR /> <BR /> After enable "ECDHE" in ciphers and reboot NetSight server, <BR /> NetSigtht can be browsed with Chrome finally~<BR /> <BR /> Reference URL:<BR /> <A href="https://jamfnation.jamfsoftware.com/article.html?id=384" target="_blank" rel="nofollow noreferrer noopener">https://jamfnation.jamfsoftware.com/article.html?id=384</A> Sat, 12 Sep 2015 07:10:00 GMT Shunze_Lee 2015-09-12T07:10:00Z https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/make-netsight-can-be-browsed-with-chrome-45/m-p/28153#M2634 After Chrome upgrade to version 45, NetSight can not be browsed with the following error message,<BR /> ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY<BR /> <BR /> I found a way to modify the tomcat's server.xml file, <BR /> change cipher parameter from<BR /> ciphers="${enterasys.tomcat.ciphers}"<BR /> to<BR /> ciphers="TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,<BR /> TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384,<BR /> TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA"<BR /> <BR /> The server.xml file can be found as the following path,<BR /> /usr/local/Extreme_Networks/NetSight/jboss/server/default/deploy/jbossweb-tomcat55.sar/server.xml<BR /> <BR /> After enable "ECDHE" in ciphers and reboot NetSight server, <BR /> NetSigtht can be browsed with Chrome finally~<BR /> <BR /> Reference URL:<BR /> <A href="https://jamfnation.jamfsoftware.com/article.html?id=384" target="_blank" rel="nofollow noreferrer noopener">https://jamfnation.jamfsoftware.com/article.html?id=384</A> Sat, 12 Sep 2015 07:10:00 GMT https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/make-netsight-can-be-browsed-with-chrome-45/m-p/28153#M2634 Shunze_Lee 2015-09-12T07:10:00Z https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/make-netsight-can-be-browsed-with-chrome-45/m-p/28154#M2635 Thanks for sharing!<BR /> Tue, 22 Sep 2015 23:04:00 GMT https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/make-netsight-can-be-browsed-with-chrome-45/m-p/28154#M2635 Drew_C 2015-09-22T23:04:00Z https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/make-netsight-can-be-browsed-with-chrome-45/m-p/28155#M2636 There is a better way than my wrote.<BR /> <A href="https://community.extremenetworks.com/extreme/topics/cant-access-netsight-in-firefox-39-due-to-weak-ephemeral-diffie-hellman-key?topic-reply-list%5Bsettings%5D%5Bfilter_by%5D=all" target="_blank" rel="nofollow noreferrer noopener">https://community.extremenetworks.com/extreme/topics/cant-access-netsight-in-firefox-39-due-to-weak-...</A><BR /> Wed, 30 Sep 2015 11:40:00 GMT https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/make-netsight-can-be-browsed-with-chrome-45/m-p/28155#M2636 Shunze_Lee 2015-09-30T11:40:00Z