cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 

Can't access Netsight in Firefox 39 due to weak ephemeral Diffie-Hellman key

Can't access Netsight in Firefox 39 due to weak ephemeral Diffie-Hellman key

James_A
Valued Contributor
Firefox 39 has deprecated some older and weaker SSL/TLS options for security reasons. I know how to work around this error with about:config options, but how do I fix the config on the NetSight server for everyone? I'm currently running 6.2.0.211. Poking around it seems to be running JBoss, which I'm not familiar with at all.

Full error:

An error occurred during a connection to netsight.xxx:8443. SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key)
14 REPLIES 14

Rob_Yamry1
New Contributor
Also, the fix mentioned in my case (1149931) takes care of the issue.

Thanks Rob. I took at look at the case and discussed with some others as well. A few of us have re-tested with 6.2.0.221 and Chrome v45 but did not see the issue. Let us know if you have issues after the upgrade and we can dig into it again.

Regards,
Jason

Rob_Yamry1
New Contributor
Yes, all of the above. With Firefox as well.

-Rob

Jason1
Extreme Employee
Rob,

We are looking into this further with Chrome v45. Are you seeing this on the NetSight Server, NAC page or the NAC portal?

Thanks,
Jason
GTM-P2G8KFN