title: Weak ethereal DH key Activemq
body: <p>I'm trying a set up a secure websocket in activemq using CA certs, but I keep getting this message in the browser:</p>
  
  <blockquote>
    <p>SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key)</p>
  </blockquote>
  
  <p>I believe this is related to the cipher suite, but I'm A) not finding using the right cipher suite or B) configuring it in the wrong area of Apache Activemq.  Currently, I've been adjusting the configuration of ssl in transport connector in activemq.xml( <a href="http://activemq.apache.org/ssl-transport-reference.html" rel="nofollow noreferrer">http://activemq.apache.org/ssl-transport-reference.html</a>).  However, I know that activemq uses a jetty server and i'm wondering if I should be configuring the suite in jetty.xml a la <a href="https://stackoverflow.com/questions/30523324/how-to-config-local-jetty-ssl-to-avoid-weak-phermeral-dh-key-error">How to config local Jetty ssl to avoid weak phermeral DH key error?</a>.
  So, my questions are, is this the right approach?  If so, what's the correct cipher suite for activemq?  </p>
  
  <p>The Java JDK version 1.7.0_79</p>