1. Home
  2. Support
Article - CS114640

"Could not generate DH keypair" error when connecting Firefox 18 to Integrity Server over SSL port

Modified: 04-Oct-2018   


Applies To

  • PTC RV&S (formerly Integrity Lifecycle Manager) 10.3 to 12.0

Description

  • SSL-related errors in the server log
  • Firefox displays the following error when attempting to log into the Web Interface for an Integrity Server configured for SSL:
An error occurred during a connection to <server>.
Peer reports it experienced an internal error.
(Error code: ssl_error_internal_error_alert)
  • Server reports a Could not generate DH keypair error in the <serverInstallDir>/log/server.log file with the following stack trace:
INFO  [mksis.IntegrityServer] DIAGNOSTIC(0): java.lang.RuntimeException -- java.lang.RuntimeException: Could not generate DH keypair
    at com.sun.net.ssl.internal.ssl.Handshaker.checkThrown(Handshaker.java:1012)
    at com.sun.net.ssl.internal.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:480)
    at com.sun.net.ssl.internal.ssl.SSLEngineImpl.writeAppRecord(SSLEngineImpl.java:1120)
    at com.sun.net.ssl.internal.ssl.SSLEngineImpl.wrap(SSLEngineImpl.java:1092)
    at javax.net.ssl.SSLEngine.wrap(SSLEngine.java:492)
    at mks.nio.AbstractSelectableChannelWriter$SecureChannelAdapter.getBuffers(AbstractSelectableChannelWriter.java:876)
    at mks.nio.AbstractSelectableChannelWriter$Listener.write(AbstractSelectableChannelWriter.java:600)
    at mks.nio.AbstractSelectableChannelWriter$Listener.handleWrite(AbstractSelectableChannelWriter.java:554)
    at mks.nio.CompositeSelectableOperationListener.handleWrite(CompositeSelectableOperationListener.java:81)
    at mks.nio.SimpleSelectableChannelWatcher.handleSelectedKey(SimpleSelectableChannelWatcher.java:278)
    at mks.nio.SimpleSelectableChannelWatcher.run(SimpleSelectableChannelWatcher.java:236)
    at java.lang.Thread.run(Thread.java:662)
Caused by: java.lang.RuntimeException: Could not generate DH keypair
    at com.sun.net.ssl.internal.ssl.ECDHCrypt.<init>(ECDHCrypt.java:50)
    at com.sun.net.ssl.internal.ssl.ServerHandshaker.setupEphemeralECDHKeys(ServerHandshaker.java:972)
    at com.sun.net.ssl.internal.ssl.ServerHandshaker.trySetCipherSuite(ServerHandshaker.java:853)
    at com.sun.net.ssl.internal.ssl.ServerHandshaker.chooseCipherSuite(ServerHandshaker.java:782)
    at com.sun.net.ssl.internal.ssl.ServerHandshaker.clientHello(ServerHandshaker.java:557)
    <continues...>
This is a printer-friendly version of Article 114640 and may be out of date. For the latest version click CS114640