Can't access Netsight in Firefox 39 due to weak ephemeral Diffie-Hellman key

[James_A]

Firefox 39 has deprecated some older and weaker SSL/TLS options for security reasons. I know how to work around this error with about:config options, but how do I fix the config on the NetSight server for everyone? I'm currently running 6.2.0.211. Poking around it seems to be running JBoss, which I'm not familiar with at all.

Full error:

An error occurred during a connection to netsight.xxx:8443. SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key)

[Rob_Yamry1]

Also, the fix mentioned in my case (1149931) takes care of the issue.

[Jason1]

Thanks Rob. I took at look at the case and discussed with some others as well. A few of us have re-tested with 6.2.0.221 and Chrome v45 but did not see the issue. Let us know if you have issues after the upgrade and we can dig into it again.

Regards,
Jason

[Rob_Yamry1]

Yes, all of the above. With Firefox as well.

-Rob

[Jason1]

Rob,

We are looking into this further with Chrome v45. Are you seeing this on the NetSight Server, NAC page or the NAC portal?

Thanks,
Jason