Fix OpenResty Service Failure Due to Weak DH Parameters
General
Escalation
General
Escalation
Description
Hi , The cloud.cd.percona.com service was inaccessible. Upon investigation, I found that the OpenResty service was failing due to an issue with Diffie-Hellman (DH) parameters being too small. The error message was:
I updated the following snippet to use a 4096-bit DH parameter instead of 1024, as the latter was too small and caused the failure:
After applying this change, I re-ran the cloud-init script (commenting out a few functions as suggested), and the service started working as expected.
Hi ,
The
cloud.cd.percona.comservice was inaccessible. Upon investigation, I found that the OpenResty service was failing due to an issue with Diffie-Hellman (DH) parameters being too small. The error message was:I updated the following snippet to use a 4096-bit DH parameter instead of 1024, as the latter was too small and caused the failure:
After applying this change, I re-ran the cloud-init script (commenting out a few functions as suggested), and the service started working as expected.