This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

(ssl_error_weak_server_ephemeral_dh_key) error on ONE site (W764)- other machine (W764) does NOT have this error --difference avast/mcafee and w7 H Prem vs Pro

  • 3 replies
  • 2 have this problem
  • 1 view
  • Last reply by cor-el

foxisgood
foxisgood
more options

I have seen many reports wbout login fails for the ssl_error_weak_server_ephemeral_dh_key. This happens to me on ONE website ( local library) and ONE of my 2 W7 machines. Fails on W7/64 with McAfee and W7Pro Succeeds on W7/64 with Avast and W7 Home Premium

Just started failing in the last 2 weeks.

I have tried to read the fixes, but the information was sparse . I can get around a computer, but I don't know much about the structure of FF and I need a detailed method. Plus there are the warnings about 'logjams'. I keep coming back to one machine works and one doesn't. Both running 39.0 and settings are identical as far as I can tell -- I even tried to scan the troubleshooting info.

Thanks,

I have seen many reports wbout login fails for the ssl_error_weak_server_ephemeral_dh_key. This happens to me on ONE website ( local library) and ONE of my 2 W7 machines. Fails on W7/64 with McAfee and W7Pro Succeeds on W7/64 with Avast and W7 Home Premium Just started failing in the last 2 weeks. I have tried to read the fixes, but the information was sparse . I can get around a computer, but I don't know much about the structure of FF and I need a detailed method. Plus there are the warnings about 'logjams'. I keep coming back to one machine works and one doesn't. Both running 39.0 and settings are identical as far as I can tell -- I even tried to scan the troubleshooting info. Thanks,

Chosen solution

You can compare the settings of the involved prefs.

  • security.ssl3.dhe_rsa_aes_128_sha
  • security.ssl3.dhe_rsa_aes_256_sha

Note that the DHE cipher suites were disabled for a reason and re-enabling them will make you vulnerable for the Logjam attack. You can consider to use a separate profile with the two involved cipher suites enabled and use that profile for accessing the blocked sites.

Read this answer in context 👍 1

All Replies (3)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Firefox 39 and later include a fix for the Logjam vulnerability and have disabled vulnerable DHE cipher suites that are involved with the Logjam attack.

Logjam: How Diffie-Hellman Fails in Practice:

See also:

foxisgood
foxisgood Question owner
more options

This does not solve my issue. Firefox allows the connection on one W7 machine and disallows it on the other. Both are set up identically to the best of my knowledge.

The differences are McAffe/Avast and W7 Pro /W7 Home Prem

Both are version 39. Settings are identical

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Chosen Solution

You can compare the settings of the involved prefs.

  • security.ssl3.dhe_rsa_aes_128_sha
  • security.ssl3.dhe_rsa_aes_256_sha

Note that the DHE cipher suites were disabled for a reason and re-enabling them will make you vulnerable for the Logjam attack. You can consider to use a separate profile with the two involved cipher suites enabled and use that profile for accessing the blocked sites.