1. Home
  2. Misc
  3. This server supports weak Diffie-Hellman (DH) key exchange parameters

This server supports weak Diffie-Hellman (DH) key exchange parameters

You may have received a warning or a limitation on your SSL grade due to weak DH key exchange. This is not a cipher issue, but can be easily corrected by adding a 2048 bit group to your PEM file.

Create the new file by running:

# openssl dhparam -out dhparams.pem 2048

Then take the contents of dhparams.pem and add them to the bottom of your Snapt .pem certificate file.

Updated on October 4, 2018


Was this article helpful?

Related Articles