AppWorx, Dollar Universe and Sysload Community

  • Private Community
Back to discussions
Expand all | Collapse all

Cannot bring up interface recieve could not generate dh keypair error

  • 1.  Cannot bring up interface recieve could not generate dh keypair error

    Posted Feb 23, 2017 01:41 PM

    *** DISCLAIMER: we recommend talking to your security/system admin before making any of these changes.***

    We have had some customer unable to open their client in version 9.x of Applications Manager when having their master run off of java 1.8 and the client machines using java 1.6.

    It throws a:
    javax.net.ssl.SSLException: java.lang.RuntimeException: Could not generate DH keypair

    error. The preferred resolution would be to upgrade java on the client machine to java 1.8

    However, if this is not possible, you can access the client by doing the following:

    Add DH to the jdk.tls.disabledAlgorithms list in the java.security file on the server. Example:

    jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768, \
    EC keySize < 224, DH

    Then run awinstall and change the two encryption lines to no:
    Enable SSL Encryption = no
    Enable Automation Engine Agent Encryption = no

    Restart processes afterwards and this should allow you to access the client.