DH group cipher suites getting rejected

[Salz, Rich]

  *   However if I try ECDHE, it works fine. Is DHE only cipher suites less common now ?
  *   I believe its responsibility of server to generate DHparam of large enough size.

Yes, DHE has dropped because it is hard to get right, and it takes more CPU cycles than ECDHE.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20190918/101587fd/attachment.html>