Depending on the software, an upgrade may not be necessary.
I had this issue as well. In my case, the application was using Tomcat and I was able to change config settings in the
server.xml file. I found the solution here.
To quote the relevant portion:
Tomcat has several weak ciphers enabled by default. SSL received a weak
ephemeral Diffie-Hellman key in Server Key Exchange handshake message. If you
have a Tomcat server (version 4.1.32 or later), you can disable SSL 2.0 and
disable weak ciphers by following these instructions. Open your
file add the following to your SSL connector
<connector port="443" maxhttpheadersize="8192" address="127.0.0.1"
enablelookups="false" disableuploadtimeout="true" acceptCount="100"
scheme="https" secure="true" clientAuth="false" SSLEnabled="true"
truststoreFile="mytruststore.truststore" truststorePass="changeit" />
In my situation, the only part that I had to modify in the
server.xml file was the
After you do this, restart your application.