访问https出现 ssl_error_weak_server_ephemeral_dh_key错误

环境：

tomcat7.0、jdk7.0、centos6.5

解决办法：

# 修改tomcat/conf/server.xml, 更改配置, 增加sslEnabledProtocols和ciphers

vi /tomcat/conf/server.xml

# 修改配置如下，增加 sslEnabledProtocols 和 ciphers。

<Connector port="443" protocol="HTTP/1.1" SSLEnabled="true" 
           maxThreads="150" scheme="https" secure="true" 
	   clientAuth="false" keystoreFile="/tomcat/conf/tomcat.keystore" 
	   keystorePass="123456" sslProtocol="TLS" sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2" 
           ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_RC4_128_SHA" 
           URIEncoding="UTF-8"/>

#启动tomcat

/tomcat/bin/startup.sh

转载于:https://my.oschina.net/ddfly/blog/511851