1. Home
  2. Misc
  3. This server supports weak Diffie-Hellman (DH) key exchange parameters

This server supports weak Diffie-Hellman (DH) key exchange parameters

You may have received a warning or a limitation on your SSL grade due to weak DH key exchange. This is not a cipher issue, but can be easily corrected by adding a 2048 bit group to your PEM file.

Create a new file by running:

# openssl dhparam -out dhparams.pem 2048

Then take the contents of dhparams.pem and add them to the bottom of your Snapt .pem certificate file.

Updated on March 24, 2020


Was this article helpful?

Related Articles