0 Replies Latest reply on Sep 12, 2013 5:57 AM by stemue

    SSL and Diffie-Hellman groups

    stemue

      Hi folks!

       

      I configured jBoss to use DHE-RSA-AES256-SHA for HTTPS connections. I wanted to know if it really uses this cipher and monitored the traffic with wireshark. Everything was ok except the DH key agreement. jBoss uses 768 bit group for DH, which is way too short. Google didn't find any option to influence the DH key size, so I decided to ask here.

      Is there any option I can set to make jBoss use 2048 bit groups for DH exchange?

       

      Steffen