SSL Labs says that a website I control supports weak ciphersuites because they have DH 1024 bit, e.g. this one: TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f).
I tried to connect to the website from my laptop while Wireshark was open, and I can see that the communication is performed with that ciphersuite, but what I see is:
- p length: 256
- g length: 256
So it seems right. Where the 1024 bit information comes from? Are there other parameters I should check?