I finally found a working configuration : - set DH params key size to 4096 - set compatibility mode to "intermediate" (was "modern").
