Firefox and Opera Weak Ephemeral Diffie-Hellman Key

[Rich Graves]

Cool, I didn't know that Firefox was being so aggressive about that.
This is basic ssl server configuration, not a shib thing. See https://www.ssllabs.com/ssltest/analyze.html?d=fim.temple.edu for some pointers. Unfortunately, if you inherited someone else's old tomcat install, it might not be so "basic." Your best short term fix is probably to put a modern version of Apache in front of it as a reverse proxy.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150707/171efb8a/attachment.html>