Exception: "The security strength of SHA-1 digest algorithm is not sufficient for this key size" thrown in the JBoss ON agent log when trying to connect to the server

Solution Unverified - Updated -

Issue

  • Exception: "The security strength of SHA-1 digest algorithm is not sufficient for this key size" thrown in the JBoss ON agent log when trying to connect to the server;
  • Error while starting RHQ agent:

    ERROR [WorkerThread#0[10.11.12.13:53232]] (jboss.remoting.transport.socket.ServerThread)- WorkerThread#0[10.124.237.69:53232] exception occurred during first invocation
    java.lang.reflect.InvocationTargetException
    ...
    Caused by: javax.net.ssl.SSLException: Error generating DH server key exchange
    ...
    Caused by: java.security.InvalidKeyException: The security strength of SHA-1 digest algorithm is not sufficient for this key size
            at sun.security.provider.DSA.checkKey(DSA.java:111)
            at sun.security.provider.DSA.engineInitSign(DSA.java:143)
            at java.security.SignatureSpi.engineInitSign(SignatureSpi.java:103)
            at java.security.Signature$Delegate.init(Signature.java:1155)
            at java.security.Signature$Delegate.chooseProvider(Signature.java:1112)
            at java.security.Signature$Delegate.engineInitSign(Signature.java:1185)
            at java.security.Signature.initSign(Signature.java:550)
            at sun.security.ssl.HandshakeMessage$DH_ServerKeyExchange.<init>(HandshakeMessage.java:750)
            at sun.security.ssl.ServerHandshaker.clientHello(ServerHandshaker.java:882)
    

Environment

  • Red Hat JBoss Operations Network (ON) 3.3.5
  • Open Java Development Kit (OpenJDK) 1.8.0_151
  • RHEL 7.4
  • Both server's keystore and truststor are using SHA1withDSA algorithm (Signature algorithm name: SHA1withDSA).

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content