title: This server supports insecure Diffie-Hellman (DH) key exchange parameters (Logjam). Grade set to F
body: <p>Recently i have renewed my website certificates and configured SSL. After that I tested my website : SSL Server Test(unable to post link here as I have less reputation).</p>
  
  <p>It graded my website to "F". please refer to bellow image.</p>
  
  <p><a href="http://i.stack.imgur.com/HASnD.jpg" rel="nofollow">SSL Test Result</a></p>
  
  <p>and it was mentioned in the test summery that 
  "This server supports insecure Diffie-Hellman (DH) key exchange parameters (Logjam). Grade set to F". To avoid Logjam attack i followed the instructions given in this link: <a href="https://weakdh.org/sysadmin.html" rel="nofollow">Guide to Deploying Diffie-Hellman for TLS</a></p>
  
  <p>I followed the solution provided by them then I changed the ciphers in my server.xml. my ciphers are:</p>
  
  <pre><code>&lt;Connector SSLCipherSuite="ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA"
  </code></pre>
  
  <p>and tried to test the website again. The result didn't change, my website grade is still "F". <strong>How do i avoid "Logjam attack"?</strong> <strong>Can I/My customer trust my website is secure?</strong> or <strong>It is vulnerable to attacks?</strong></p>
  
  <p>I am using apache tomcat 7 server.</p>
  
  <p>Any information or help would really help me. If anymore information is required please ask me.</p>