Subscribe
Accepted Solution

OCPM 2.0RC1 and Chrome error ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

[ Edited ]

Hey guys,

 

since upgrading to Chrome Version 45.0.2454.85, I cannot connect to OnCommand Performance Manager 2.0RC1. I get the following error:

 

Server has a weak ephemeral Diffie-Hellman public key

ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

 
screenshot_error_ocpm_chrome.png
 
Connecting using Internet Explorer works fine.
 
Any suggestions?
 
Filip
 
 

Re: OCPM 2.0RC1 and Chrome error ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

I too have this problem

 

On our Monitoring screens Chrome version - 45.0.2454.82m      Doesnt work

On my desktop - 44.0.2403.155 m    Works OK

 

My desktop is pending an update to take effect when chrome is restarted. I dare not restart it as I will lose connectivity to OPM.

 

 

Re: OCPM 2.0RC1 and Chrome error ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

same issue on our side ocpm and ocum do not work with recent chrome and mozilla release. latest ie works fine

Re: OCPM 2.0RC1 and Chrome error ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

I have found a workaround.
Close all Chrome windows.
Start Chrome with the following Chiper blacklist:
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --cipher-suite-blacklist=0x0088,0x0087,0x0039,0x0038,0x0044,0x0045,0x0066,0x0032,0x0033,0x0016,0x0013

 

Re: OCPM 2.0RC1 and Chrome error ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

Firefox 40.0 also has this issue.  Anyone have a way to update that browser?  Thanks.

 

Re: OCPM 2.0RC1 and Chrome error ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

@Markus_Matschi Great job.....finally got OPM up and running on our monitoring screens :-) THanks for the post

Re: OCPM 2.0RC1 and Chrome error ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

This LOGJAM issue (CVE-2015-4000) is fixed in OPM 2.0 GA (release date 9/24).

Re: OCPM 2.0RC1 and Chrome error ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

We have the same issue with out OPM servers running 2.0RC1, but not with our OCUM 6.3RC1.

Our OS is Windows7 and browers is chrome Version 45.0.2454.85 m 

When we try with IE OPM 2.0RC1 opens up but it shows these garbage values 

{{filterWidgetController.getNumberOfAppliedFilters() > 0 ? filterWidgetController.getNumberOfAppliedFilters() : 'No'}} filter applied
 
Attached is the screen shot of the same.
opmerror.JPG
 
Regards
Adai

Re: OCPM 2.0RC1 and Chrome error ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

I also have the same issue, and when trying to open OPM 2.0RC1 in IE the only message i see is "Loading ...."

 

Opened a support case but no one is assigned for that case yet!

 

,Sheel

Re: OCPM 2.0RC1 and Chrome error ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

GA is released in less than 2 weeks....maybe a lot of these niggles will go then. Certainly the Chrome one is stated as fixed in it.