This server supports weak Diffie-Hellman (DH) key exchange parameters

You may have received a warning or a limitation on your SSL grade due to weak DH key exchange. This is not a cipher issue, but can be easily corrected by adding a 2048 bit group to your PEM file.

Create the new file by running:

# openssl dhparam -out dhparams.pem 2048

Then take the contents of dhparams.pem and add them to the bottom of your Snapt .pem certificate file.

Was this article helpful?
1 out of 3 found this helpful



Article is closed for comments.