Error while accessing eSight via WEB "Server has a weak ephemeral Diffie-Hellman public key"

Publication Date:  2016-06-28 Views:  261 Downloads:  0
Issue Description

Problem: Error of accessing eSight via WEB, error message "Server has a weak ephemeral Diffie-Hellman public key"

Product name: eSight Network

Browser: Internet Explorer version 7 and Firefox version 3.6

Software version: V200R005

Alarm Information

Server has a weak ephemeral Diffie-Hellman public key

Handling Process

1. Checking the error message on the internet as this issue is seems web browser issue

2. We found that this message means that the website is trying to set up a secure connection, but it is actually insecure because the SSL/TLS uses a Diffie-Hellman group size smaller than 1024-bit

3. Try to find solution

Root Cause

This message indicates that the website is trying to set up a secure connection, but it is actually insecure because the SSL/TLS uses a Diffie-Hellman group size smaller than 1024-bit

Solution

As the SSL/TLS of that browser "Internet Explorer version 7 and Firefox version 3.6" uses a Diffie-Hellman group size smaller than 1024-bit so we need to change the current browser or update it

For Internet Explorer version 7 upgrade it to version 9

For Firefox version 3.6 upgrade it to version 4.7

Also this case may happen with other many different browser and at this case you need to update the browser to the latest one adn try again, or change it to one of the mentioned above

Suggestions

Using the recommended browser to access eSight. For example, we can find the recommend browser in the product document for eSight V300R005C00:

Browser:
Internet Explorer 9/10/11, Mozilla Firefox 38 esr or Chrome 43

The following web browsers are recommended:
Internet Explorer 10
Mozilla Firefox 38 esr

END