DX Unified Infrastructure Management

 View Only
  • 1.  Anyone seeing the error "dh key too small" in hub 7.97

    Posted Dec 11, 2018 06:04 PM

    This was an issue in hub 7.92HF6

     

    Hub hotfix Hub 7.92HF6 tunnel connections fail wit - CA Knowledge 

     

    Seems like maybe the same thing?



  • 2.  Re: Anyone seeing the error "dh key too small" in hub 7.97

    Broadcom Employee
    Posted Dec 12, 2018 12:24 PM

    Hi Garin,

     

    just to expand on the error message, do see that in the tunel client hub.log:

    hub: [1] error:0x14082174:SSL routines:ssl3_check_cert_and_algorithm:dh key too small 

     

    If so, I would open a support case as we need to further investigate, it is probably related to an updated OpenSSL component in that build.

     

    Kind Regards,

     

    Martin Fink

    CA Tech Support



  • 3.  Re: Anyone seeing the error "dh key too small" in hub 7.97

    Posted Dec 12, 2018 12:36 PM

    Yes, tunnel client hub log. 

     

    And yes, case is already open. 

     

    If it's like the last two times this happened, it's because the wrong OpenSSL library was compiled in.

     

    There's some value in being predictable.