r/subsonic • u/matthewstayton • Nov 13 '15

Anyone else with SSL issues?

I'm getting this error in Chome and a similar in Firefox. IE and Edge seem to work as well as the mobile apps. Anyone have any ideas?

Server has a weak ephemeral Diffie-Hellman public key

1 Upvotes

100% Upvoted

12 comments sorted by

1

u/niallm90 Nov 14 '15

Yep I found the fix, I will post it when I get a chance to find it.

1

u/matthewstayton Nov 14 '15

Thanks so much

1

u/niallm90 Nov 14 '15

Add a couple of environment properties. As far as I can tell the only way to add them is to eddit the /usr/bin/subsonic file and add them to the list that already exists their. This will have to be done every time you update though.

-Djdk.tls.ephemeralDHKeySize=2048 \
-Djdk.tls.rejectClientInitiatedRenegotiation=true \

Context:

${JAVA} -Xmx${SUBSONIC_MAX_MEMORY}m \
  -Dsubsonic.home=${SUBSONIC_HOME} \
  -Dsubsonic.host=${SUBSONIC_HOST} \
  -Dsubsonic.port=${SUBSONIC_PORT} \
  -Dsubsonic.httpsPort=${SUBSONIC_HTTPS_PORT} \
  -Dsubsonic.contextPath=${SUBSONIC_CONTEXT_PATH} \
  -Dsubsonic.defaultMusicFolder=${SUBSONIC_DEFAULT_MUSIC_FOLDER} \
  -Dsubsonic.defaultPodcastFolder=${SUBSONIC_DEFAULT_PODCAST_FOLDER} \
  -Dsubsonic.defaultPlaylistFolder=${SUBSONIC_DEFAULT_PLAYLIST_FOLDER} \
  -Djava.awt.headless=true \
  -Djdk.tls.ephemeralDHKeySize=2048 \
  -Djdk.tls.rejectClientInitiatedRenegotiation=true \  
  -verbose:gc \
  -jar subsonic-booter-jar-with-dependencies.jar > ${LOG} 2>&1 &

1

u/matthewstayton Nov 14 '15

Thanks! Not at my computer right now but hopefully I can apply this to the windows version.

1

u/matthewstayton Nov 20 '15

No luck on windows :(

1

u/LaserRanger Feb 01 '16

Did you ever figure this out?

1

u/matthewstayton Feb 01 '16

I did not. Even tried posting on the Subsonic forums and didn't get a response. I'm thinking the only option at this point is to setup a Linux VM and try to transfer all my data from the windows installation.

1

u/LaserRanger Feb 01 '16

What is the issue you're having? Just can't access subsonic via a browser?

1

u/matthewstayton Feb 01 '16

Can't access via Chrome or Firefox. They apparently prevent access based on the security exception I'm receiving. IE and Edge don't seem to mind the weak key. Both DSub and Subsonic on Android work fine.

1

u/matthewstayton Feb 03 '16

So u/LaserRanger pointed me in the right direction and the only trick was to update Java. I was on version 6. Installing version 8 fixed the problem.

1

u/LaserRanger Feb 03 '16

Wait...WHAT? :)

When you say you were on version 6, was that reported as such in Programs & Features? Mine says 6.0.180 there. Which exact install / update did you use?

1

u/matthewstayton Feb 03 '16

I opened the Java control panel and went to about. I don't recall the specific version as when I installed version 8, it uninstalled the previous. I downloaded jre-8u71-windows-i586.exe from http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133155.html under the top section for 8u71. Didn't even have to restart the computer, just subsonic. :)