SAP Knowledge Base Article - Preview

3430920 - Weak SSL/TLS Key Exchange vulnerability in AS JAVA

Symptom

A scanning tool is used to perform analysis of TLS endpoints of AS java system.

The following result is returned for AS java ports associated with such system:

Weak SSL/TLS Key Exchange

Change the SSL/TLS server configuration to only allow strong key exchanges. Key exchanges used on the server should provide at least 112 bits of security, so the minimum key size to not flag this QID should be:
2048 bit key size for Diffie Hellman (DH) or RSA key exchanges
224 bit key size for Elliptic Curve Diffie Hellman (EDCH) key exchanges.


Read more...

Environment

SAP NetWeaver Application Server Java

Product

SAP NetWeaver Application Server for Java all versions

Keywords

Weak SSL/TLS Key Exchange ,2048 ,Key size ,4096 bits ,CA ,RSA , KBA , BC-JAS-SEC , Security, User Management , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.