Technical Tip: Low rates because of the weak Diffie-Helman(DH) exchange parameters
Description
This article addresses an issue where website rates (that is Qualys SSL Labs) give lower rates (B) for websites behind FortiWeb.
This may be caused by the Diffie-Helman(DH) configuration in FortiWeb.
This may be caused by the Diffie-Helman(DH) configuration in FortiWeb.
Scope
FortiWeb v5.3.6 and higher.
Solution
In version 5.3.6 a new command was introduced which fixes this issue:
# config system global
set dh-params 2048
end
After this re-configuration, there should be no problem with DH in SSL tests.
