Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dh key too small on one WP instance but not on the other (identical) #4

Open
aberbenni opened this issue May 24, 2018 · 2 comments
Open

Comments

@aberbenni
Copy link

I have two WP websites, updated at WP 4.9.6 running on same server with php7-fpm and nginx, connecting to same mysql server 5.6.10.
Same config:

define( 'MYSQL_CLIENT_FLAGS', MYSQLI_CLIENT_SSL | MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT );
define( 'MYSQL_SSL_CIPHER', 'HIGH:!aNULL:!MD5:!RC4:!DHE');
//define( 'MYSQL_SSL_CIPHER', 'AES256-SHA:AES256-RMD:DES-CBC3-RMD:RC4-SHA:DES-CBC3-SHA:DES-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC-SHA');

One works like a charm the other gave me this error:

PHP Warning:  mysqli_real_connect(): SSL operation failed with code 1. OpenSSL Error messages:
error:141A318A:SSL routines:tls_process_ske_dhe:dh key too small in /wp-includes/wp-db.php on line 1531

Seems it's not considering the MYSQL_SSL_CIPHER param. Is there anything else I could do to troubleshoot this problem.

@aberbenni
Copy link
Author

Problem identified! The dropin was not in place due to permissions problems.
Suggestion: add an alert for this situation.

@xyu xyu added the enhancement label Jul 2, 2018
@xyu
Copy link
Owner

xyu commented Jul 2, 2018

Making errors more noisy is interesting, dropin.php already reports a variety of errors when SSL connection does not get established, perhaps we should hook into admin_notices when the problem is serious enough.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants