Weak Diffie-Hellman and the Logjam Attack

Classic Servoy
1

Hi,

Is there someone who has experience with implementing/configuring tomcat against; Diffie-Hellman and the Logjam Attack https://weakdh.org/ Logjam: PFS Deployment Guide
There is a section “Apache Tomcat” (2nd URL) which describes what ciphers to add in the server.xml but i really don’t have a clue what to do with the dhparams.pem generated in the first step and how to implement it in tomcat/keystore?

Any ideas?

Thanks…

2

I solved it using the right set of ciphers. went from F to an A rating :)

3

maurice:
I solved it using the right set of ciphers. went from F to an A rating :)

Guru :D

4

I installed Nginx as reverse proxy in front of the application server and put all security in there. I also use this to block the /servoy-admin and /servoy-client pages for the public access.