Dear Maintainer,

I received this error while trying to connect to a server and the connection to
the server failed. wget 1.16 seems to make the connection successfully, but not
this package.

I'm assuming you mean this error from iceweasel:

  Error code: ssl_error_weak_server_ephemeral_dh_key

you don't mention which server you experienced this with.

This aborted connection is iceweasel protecting you from a TLS
connection that is insufficiently secure.  see https://weakdh.org/ for
more details.

If you can identify the server, we should inform the administrators that
they're not properly configured.

Perhaps this bug should be reassigned to wget, since wget is making an
ostensibly secure connection using weak handshake parameters?

Any progress on this?


Ø  see https://weakdh.org/ for more details.
Thanks for the background information, but I couldn't care less for what's going on in some dark corner of the Interwebs.  That's for our IT department to worry about.  I care about the server(s) in the lab I cannot currently reach.  Now, even if there were newer software for those servers available which addresses this "issue" (it's not an issue here -- I don't care about SSL or TLS; I'd be happy to use unencrypted connections, if the server just would let me) I couldn't upgrade the server using this workstation since I cannot even reach that server.

So, any hope of getting a fix in soon or should we just write off Firefox/Iceweasel for good?

~ Guenther

https://forum.eset.com/topic/5348-since-firefox-39-ssl-received-a-weak-ephemeral-diffie-hellman-key-error-code-ssl-error-weak-server-ephemeral-dh-key/ users 'Phydeauxdawg' and 'CCSE' helpfully list a work-around:
--8<--
Go to about:config

search for security.ssl3.dhe_rsa_aes_128_sha and security.ssl3.dhe_rsa_aes_256_sha

Set them both to false.
-->8--

and