3

Is it possible to force the browser to ignore the "Server has a weak ephemeral Diffie-Hellman public key" error? I've tried it on Opera, Chrome and Firefox. But there is nothing too visible that allows me to ignore this.

3
  • 1
    -1: Not a great idea as this would leave your browser to vulnerable to Logjam. See: security.stackexchange.com/questions/89689/…
    – bwDraco
    Jul 14, 2015 at 18:53
  • 1
    @DragonLord That doesn't make sense. The user knows (or should know) exactly what he's doing. And also, in the rules given by the help center, that's is not a feasible reason for closing.
    – Red Banana
    Jul 15, 2015 at 5:25
  • 3
    I hope the answer is here
    – RogUE
    Jul 22, 2015 at 14:13

3 Answers 3

5

Yes, just tell the browser you want to use an insecure connection by using the http protocol instead of https.

The browser is warning you because you requested a secure connection (via https), and the public key provided by the server is not secure.

TLS errors are not something users should casually ignore. If you don't care about security, then just tell the browser to use the insecure protocol; don't tell the browser to use the secure protocol and then ignore any errors with the security. That defeats the purpose.

1
  • It's not the case that I don't care about security. It's more a matter of urgency: I need to access one site to obtain the barcodes of my water bills and then pay them via internet banking. I called them and asked for them to send me the barcodes via e-mail, they agreed but never sent me. I'm really trying to avoid waiting for them.
    – Red Banana
    Jul 15, 2015 at 5:30
4

Answer was given here :

Type in your browser (I tried in Iceweasel)

    about:config 

Search for

    security.ssl3.dhe_rsa_aes_128_sha 

    security.ssl3.dhe_rsa_aes_256_sha 

    security.ssl3.dhe_rsa 

Set them both to false (just double click to set them to false or true).

That works for everything but Chrome it appears. In Chrome you must type:

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --cipher-suite-blacklist=0x0088,0x0087,0x0039,0x0038,0x0044,0x0045,0x0066,0x0032,0x0033,0x0016,0x0013"

0

For Internet Explorer 11: add this registry key:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman] "ClientMinKeyBitLength"=dword:00000200

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .