OCPM 2.0RC1 and Chrome error ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

[filipzahradnik]

Hey guys,

since upgrading to Chrome Version 45.0.2454.85, I cannot connect to OnCommand Performance Manager 2.0RC1. I get the following error:

Server has a weak ephemeral Diffie-Hellman public key

ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY

Connecting using Internet Explorer works fine.

Any suggestions?

Filip

[GROOVE]

I too have this problem

On our Monitoring screens Chrome version - 45.0.2454.82m      Doesnt work

On my desktop - 44.0.2403.155 m    Works OK

My desktop is pending an update to take effect when chrome is restarted. I dare not restart it as I will lose connectivity to OPM.

[Stefan-Reitmeier]

same issue on our side ocpm and ocum do not work with recent chrome and mozilla release. latest ie works fine

[Markus_Matschi]

I have found a workaround.
Close all Chrome windows.
Start Chrome with the following Chiper blacklist:
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --cipher-suite-blacklist=0x0088,0x0087,0x0039,0x0038,0x0044,0x0045,0x0066,0x0032,0x0033,0x0016,0x0013

[wafl_scan]

Firefox 40.0 also has this issue.  Anyone have a way to update that browser?  Thanks.

[GROOVE]

@Markus_Matschi Great job.....finally got OPM up and running on our monitoring screens 🙂 THanks for the post

[ruijuan · Accepted solution]

This LOGJAM issue (CVE-2015-4000) is fixed in OPM 2.0 GA (release date 9/24).

[AdaikkappanArumugam]

We have the same issue with out OPM servers running 2.0RC1, but not with our OCUM 6.3RC1.

Our OS is Windows7 and browers is chrome Version 45.0.2454.85 m 

When we try with IE OPM 2.0RC1 opens up but it shows these garbage values 

{{filterWidgetController.getNumberOfAppliedFilters() > 0 ? filterWidgetController.getNumberOfAppliedFilters() : 'No'}} filter applied

Attached is the screen shot of the same.

Regards

Adai

[sheelnidhig]

I also have the same issue, and when trying to open OPM 2.0RC1 in IE the only message i see is "Loading ...."

Opened a support case but no one is assigned for that case yet!

,Sheel

[GROOVE]

GA is released in less than 2 weeks....maybe a lot of these niggles will go then. Certainly the Chrome one is stated as fixed in it.