Return
-
Title
Webthority site not working with Firefox or Chrome. Error: " .ssl_error_weak_server_ephemeral_dh_key" -
Description
The following error message appears when using Firefox or Chrome to access a Webthority site:
.ssl_error_weak_server_ephemeral_dh_key -
Cause
From version 39, Firefox will no longer allow weak ciphers.
Chrome will also check for weak ciphers. -
Resolution
WORKAROUND:
Disable the weak ciphers used by Webthority.
1. Edit the server.xml file which is located here on the proxy host:
../Installation_folder/Webthority/conf
E.g:
C:\Program Files\Quest Software\Webthority\conf\server.xml2. Add the following line under the line containing the 'SSLEnabled="true" entry:
TLS_RSA_WITH_RC4_128_MD5 (0x4) 128
ciphers="SSL_RSA_WITH_RC4_128_MD5, SSL_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA"
This will disable all the weak ciphers, and allow the following:
128 TLS_RSA_WITH_RC4_128_SHA (0x5) 128
128 TLS_RSA_WITH_AES_128_CBC_SHA (0x2f) 128
TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa) 1123. Restart Webthority on the Proxy host.