Forum Discussion
ITOPSNetwTeam_6
Nimbostratus
Sep 23, 2015ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY SSL error with Chrome 45
Hi,
The new Chrome browser version V45 seems to block access to ssl-sites using a public key smaller than 1024 bits. We offload the SSL for our websites to our LTM (V11.5.3) using a client SSL P...
ITOPSNetwTeam_6
Nimbostratus
Sep 24, 2015The origin of the problem has been found: it turns out that the traffic from our test network for this site was erroneously routed to one of the member servers instead of the Virtual server, and this member server still uses DH. This (mis)configuration was introduced several years ago and functionally worked fine, so it remained unnoticed until now.
Brad_Parker
Cirrus
Sep 24, 2015Thanks for the update. I thought I was going crazy. That version and cipher string shouldn't have been and isn't using DH. I'm glad you found it.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects