--
You received this message because you are subscribed to the Google Groups "obiba-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to obiba-users...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/obiba-users/0b66e977-e972-4246-8894-bd4becc49767n%40googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/obiba-users/de272885-863a-4bc9-bae2-18fbfc3ba254n%40googlegroups.com.
Hi,
Trying to query your server using curl -X POST https://redcap.dev.valeria.science/api/ -H "Accept: application/json" -d token=47210F24DB8AE095D20BB417EC238BC2 -d format=json -d content=project
, I get the error curl: (35) error:141A318A:SSL routines:tls_process_ske_dhe:dh key too small
.
This seems to be related to your server’s openssl security/cipher configuration (looks to be the CipherString
option in /etc/ssh/openssl.cnf
).
The way to make it work is by adding the option --cipher 'DEFAULT:!DH'
which results in curl -X POST https://redcap.dev.valeria.science/api/ -H "Accept: application/json" -d token=47210F24DB8AE095D20BB417EC238BC2 -d format=json -d content=project --cipher 'DEFAULT:!DH'
.
Regards.
To view this discussion on the web visit https://groups.google.com/d/msgid/obiba-users/CAGrE6ouHcnVk2DLCZNaoJwx82xRf9GY_srvVXptcY4z5AgKHtg%40mail.gmail.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/obiba-users/CAOGeEEK3-urzyKZFkMht_9cTR8Uryq58iVrBY9APVgUG7sargQ%40mail.gmail.com.
I am using debian buster (debian testing).
In my /etc/ssl/openssl.cnf, I do have the
CipherString = DEFAULT@SECLEVEL=2` line which seems to be related to the issue.
My openssl version is 1.1.1j-1
which is mentioned in this debian bug report log.
To view this discussion on the web visit https://groups.google.com/d/msgid/obiba-users/CAGrE6ot0HmD6ax_G3x7ZhD5E0GE%2BB3qq8FTd2dSu04%3DhcZaigw%40mail.gmail.com.