smartdevicelink / sdl_core

SmartDeviceLink In-Vehicle Software and Sample HMI
BSD 3-Clause "New" or "Revised" License
240 stars 245 forks source link

Cloud Apps WSS handshake using weak cipher suite #3884

Closed Jack-Byrne closed 2 years ago

Jack-Byrne commented 2 years ago

Bug Report

During the WSS connection with a cloud app, the ssl handshake is failing with the message "dh key length too small".

This was tested with a 2048 bit RSA signed CA certificate so the issue must be with the cipher suite key exchange method used by Core & the cloud application.

Reproduction Steps
  1. Setup sdl java se app to use wss connections
  2. Setup sdl core to connect to java app with a wss connection
  3. Activate app
Expected Behavior

Secured communication is established and the app registers.

Observed Behavior

WSS error: dh key length too small, connection is not established

OS & Version Information