When launching the Rest API where SSL is enabled, the curl command fails with "dh key too small":
curl -v -f -H "${automicAuth}" ${automicServer}/executions -H "Content-Type:application/json" -d "${desc}"
CApath: none
curl: (35) error:141A318A:SSL routines:tls_process_ske_dhe:dh key too small
How can we avoid this error?
Release : 12.x and 21.x
Component: Automation Engine
Scope: Rest API
This error means the JCP SSL setup is vulnerable because it supports small DH keys, and this is getting rejected by "recent" versions of OpenSSL / curl
Explained here, enable the legacy cipher suites on the Linux system where curl command is launched with:
update-crypto-policies --set LEGACY
You should setup again the SSL in the JCP regenerating the keystore/certificates of the JCP Rest API and use an updated Java version that block these short cyphers.
The steps are described here