Server has a weak ephemeral Diffie-Hellman public key

[Jirong Hu]

Our users are getting this message after upgrade Chrome to v45, and can't access JIRA (v5.2.4). This link from Google explains the reason: https://www.chromium.org/administrators/err_ssl_weak_server_ephemeral_dh_key?&hl=en-US

What's the exact procedure to fix this problem in JIRA?

Thanks

Jirong

[no_longer_in_sudoers_file · Accepted solution]

This issue is not JIRA, but is instead the SSL/TLS certificate used to secure HTTPS connections.

You will need to re-generate your certificate with a larger key size (e.g. greater than 2048-bits rather than smaller sizes) and have the Certificate Authority (CA) sign the certificate.

[Nathan Curry]

This is not actually true. There are configurations that need to be changed in the Tomcat server.xml in regards to the cyphers and protocols used for the connection. I was able to resolve the issue with the following instructions without changing my certificate: https://confluence.atlassian.com/display/JIRAKB/Server+has+a+weak,+ephemeral+Diffie-Hellman+public+key