title: How to config local Jetty ssl to avoid weak phermeral DH key error?
body: <p>I'm using keytool to generate a keystore to config a local development jetty to run ssl</p>
  
  <pre><code>keytool.exe -keystore jetty.keystore -alias jetty -genkey -keyalg RSA -sigalg SHA256withRSA
  </code></pre>
  
  <p>Jetty config:</p>
  
  <pre><code>&lt;Call name="addConnector"&gt;
      &lt;Arg&gt;
          &lt;New class="org.eclipse.jetty.server.ssl.SslSelectChannelConnector"&gt;
              &lt;Arg&gt;
                  &lt;New class="org.eclipse.jetty.http.ssl.SslContextFactory"&gt;
                      &lt;Set name="keyStore"&gt;jetty/jetty.keystore&lt;/Set&gt;
                      &lt;Set name="keyStorePassword"&gt;jetty6&lt;/Set&gt;
                      &lt;Set name="keyManagerPassword"&gt;jetty6&lt;/Set&gt;
                      &lt;Set name="trustStore"&gt;jetty/jetty.keystore&lt;/Set&gt;
                      &lt;Set name="trustStorePassword"&gt;jetty6&lt;/Set&gt;
                  &lt;/New&gt;
              &lt;/Arg&gt;
              &lt;Set name="port"&gt;8443&lt;/Set&gt;
              &lt;Set name="maxIdleTime"&gt;30000&lt;/Set&gt;
          &lt;/New&gt;
      &lt;/Arg&gt;
  &lt;/Call&gt;
  </code></pre>
  
  <p>It works fine until recently in new browser like Firefox Aurora and Chrome Canary, it rejects with (in Firefox's case):</p>
  
  <blockquote>
    <p>An error occurred during a connection to localhost:8443. SSL received
    a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake
    message. (Error code: ssl_error_weak_server_ephemeral_dh_key)</p>
  </blockquote>
  
  <p>There is no way to accept it manually. So, I should re-generate a stronger key? Or it's a configuration in jetty?</p>