OpenSSL DH key size issue

RunLLM
RunLLM

It seems likely that this error ("dh key too small") is related to the security level enforced by your OpenSSL configuration, which rejects Diffie-Hellman (DH) keys below a certain size. This is a common issue when connecting to AFIP/ARCA web services from environments with OpenSSL 1.1+ or 3.x, as they default to a higher security level that may not be compatible with AFIP's DH parameters. Users have resolved this by lowering the OpenSSL security level (e.g., using curl --ciphers DEFAULT@SECLEVEL=1) or adjusting the OpenSSL config, but this is a workaround and not a fix in the SDK itself.

If you want more detail or step-by-step instructions for your environment, let me know.

Sources: