Forum Discussion

ITOPSNetwTeam_6's avatar
ITOPSNetwTeam_6
Icon for Nimbostratus rankNimbostratus
Sep 23, 2015

ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY SSL error with Chrome 45

Hi,   The new Chrome browser version V45 seems to block access to ssl-sites using a public key smaller than 1024 bits. We offload the SSL for our websites to our LTM (V11.5.3) using a client SSL P...
application delivery
LTM
ITOPSNetwTeam_6's avatar
ITOPSNetwTeam_6
Icon for Nimbostratus rankNimbostratus

The origin of the problem has been found: it turns out that the traffic from our test network for this site was erroneously routed to one of the member servers instead of the Virtual server, and this member server still uses DH. This (mis)configuration was introduced several years ago and functionally worked fine, so it remained unnoticed until now.

 

Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Sep 24, 2015
Thanks for the update. I thought I was going crazy. That version and cipher string shouldn't have been and isn't using DH. I'm glad you found it.