[AMQ-5970] Weak ethereal DH key bug

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 5.12.0
• Labels: ssl ssl3 sslContext websocket

Environment

JDK 1.7.0_79

• External issue ID: https://issues.apache.org/jira/browse/APLO-287
• Assignee: Unassigned
• Reporter: Laura Mann
• Created: 16/Sep/15 17:32
• Updated: 22/Sep/15 14:56
• Resolved: 22/Sep/15 14:56

Description

All modern browser's throw " SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key) " when attempting to connect to a secure websocket via activemq. This appears to be related to enabling and disabling the correct cipher suite (though no combination using the transport.enabledCipherSuites=… option seems to work).

Issue Links

• relates to: AMQ-4520 Allow the bouncy castle security provider to be used if present in the lib dir.