# Weak Diffie-Hellman strength

**URL:** <https://forum.search-guard.com/t/weak-diffie-hellman-strength/1610>\
**Category:** Search Guard\
**Created:** [July 30, 2019, 10:51am UTC](https://forum.search-guard.com/t/weak-diffie-hellman-strength/1610 "2019-07-30T10:51:56Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![victorvic](https://avatars.discourse-cdn.com/v4/letter/v/b5ac83/32.png) [@victorvic](https://forum.search-guard.com/u/victorvic)\
**Post date:** [July 30, 2019, 10:51am UTC](https://forum.search-guard.com/t/weak-diffie-hellman-strength/1610/1 "2019-07-30T10:51:57Z")

</div>

Hi,

We have a vulnerability scanner deployed in our company and we’ve been scanning a ELK stack environment we setup with SearchGuard as the security addon for the stack.

However, we can see that the scanner has detected the key strength of diffie-hellman to be \< 2048 which it considers as a medium severity. How can we resolve this for searchguard?

EDIT: It’s reacting on the port 9300 TCP.

---

<div class="post-metadata">

**Author:** ![hsaly](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/hsaly/32/21_2.png) [@hsaly](https://forum.search-guard.com/u/hsaly)\
**Post date:** [July 30, 2019, 11:45am UTC](https://forum.search-guard.com/t/weak-diffie-hellman-strength/1610/2 "2019-07-30T11:45:56Z")

</div>

Please provide your certificate details and more detailed output of the scanner (you can send confidential informations via PGP encrypted mail if necessary: [Search Guard Security | Securing your Elasticsearch cluster with Search Guard](https://search-guard.com/security/))

How exactly did you create your SSL certificates?

---

<div class="post-metadata">

**Author:** ![hsaly](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/hsaly/32/21_2.png) [@hsaly](https://forum.search-guard.com/u/hsaly)\
**Post date:** [July 30, 2019, 11:46am UTC](https://forum.search-guard.com/t/weak-diffie-hellman-strength/1610/3 "2019-07-30T11:46:00Z")

</div>



---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [August 20, 2019, 12:00pm UTC](https://forum.search-guard.com/t/weak-diffie-hellman-strength/1610/4 "2019-08-20T12:00:36Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.