# net::ERR\_SSL\_WEAK\_SERVER\_EPHEMERAL\_DH\_KEY
**URL:** https://community.wowza.com/t/net-err-ssl-weak-server-ephemeral-dh-key/46127
**Category:** Wowza Streaming Engine
**Created:** [November 3, 2015, 4:02pm UTC](https://community.wowza.com/t/net-err-ssl-weak-server-ephemeral-dh-key/46127 "2015-11-03T16:02:44Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Samuel\_ZASLAVSKY](https://community.wowza.com/u/Samuel_ZASLAVSKY)
#### Post date: [November 3, 2015, 4:02pm UTC](https://community.wowza.com/t/net-err-ssl-weak-server-ephemeral-dh-key/46127/1 "2015-11-03T16:02:44Z")
Hi,
I just upgraded from Wowza media Server to Wowza Streaming Engine and set up a streamlock protected application as mentioned in the documentation.
But I can’t stream rtmps to my flash player in Chrome. The error is :
POST [https://xxxxx.streamlock.net/open/1](https://xxxxx.streamlock.net/open/1) net::ERR\_SSL\_WEAK\_SERVER\_EPHEMERAL\_DH\_KEY
The rtmps stream works well in other browsers, although I got the same error when trying to read a smoothstream in Firefox : then, the error occurs when trying to download [https://xxxxx.streamlock.net/crossdomain.xml](https://xxxxx.streamlock.net/crossdomain.xml). (this smoothstreaming works in IE…)
I’ve read informations here : [https://weakdh.org/](https://weakdh.org/) and here [https://weakdh.org/sysadmin.html](https://weakdh.org/sysadmin.html) and I understand that I should, for example, disable “Export Cipher Suites”. Some examples show how to do this in Apache Http Server, Tomcat, etc… But there’s is nothing I can find about this problem and Wowza.
Any help would be greatly appreciated!
Thx a lot!
---
### Author:  [@Paul\_Shields](https://community.wowza.com/u/Paul_Shields)
#### Post date: [November 4, 2015, 2:52pm UTC](https://community.wowza.com/t/net-err-ssl-weak-server-ephemeral-dh-key/46127/2 "2015-11-04T14:52:36Z")
Hi,
This can be caused by a number of things. Are you now running Wowza Streaming Engine 4.3 with the included JRE (Java Runtime Environment)? If not, or if you are running your own Java VM then I’d suggest installing the [latest version 8 JRE](http://www.oracle.com/technetwork/java/javase/downloads/server-jre8-downloads-2133154.html) (or [JDK if that is a requirement](http://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html)).
You can explicitly state the size of the DH Key by adding the following VMOption in your [install-dir]/conf/Tune.xml file (restart Wowza once done).
```auto
-Djdk.tls.ephemeralDHKeySize=2048
```
If this does not resolve matters then you may need to generate a new StreamLock certificate, which you can do via the [Wowza Portal](https://www.wowza.com/portal/account), in the StreamLock tab.
If this still does not resolve the matter, then I’d suggest [enabling SSL debug](https://www.wowza.com/docs/how-to-improve-ssl-configuration#config) and [raising a support ticket](https://www.wowza.com/support/open-ticket). Please refer to this thread and include the information requested in the raising a ticket page.
Paul
---
### Author:  [@sal\_jefferson](https://community.wowza.com/u/sal_jefferson)
#### Post date: [November 5, 2015, 8:04am UTC](https://community.wowza.com/t/net-err-ssl-weak-server-ephemeral-dh-key/46127/3 "2015-11-05T08:04:51Z")
Thanks for the update and solution.
Best,
Salvadore
---
### Author:  [@Samuel\_ZASLAVSKY](https://community.wowza.com/u/Samuel_ZASLAVSKY)
#### Post date: [November 4, 2015, 7:03pm UTC](https://community.wowza.com/t/net-err-ssl-weak-server-ephemeral-dh-key/46127/4 "2015-11-04T19:03:26Z")
Hi Paul!
We were using an old version of Java. We use now the included JRE and it works like a charm!
Thx a lot for your help!
Sam