ERR_SSL_VERSION_OR_CIPHER_MISMATCH after adding SSL certificate to confluence server

[Usman Azeem]

Following steps were followed to enable ssl, using a trusted certificate:

1. Created keystore in /home/confluence 

2. Import the certificate: root and intermediate in the keystore  

    $ keytool -import -alias tomcat -file certfile.pem -keystore .keystore

    $ keytool -import -alias intermediary -file chain.cer -keystore .keystore

3.  Updated server.xml

<Connector port="8443" maxHttpHeaderSize="8192"
maxThreads="150"

minSpareThreads="25"
protocol="org.apache.coyote.http11.Http11NioProtocol"
enableLookups="false"

disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false"

sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2"

SSLEnabled="true"
ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TTLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_RC4_128_SHA" URIEncoding="UTF-8" keystorePass="xxxxx" keystoreFile="/home/confluence1/.keystore" keystoreType="JKS"/>

4. ERR_SSL_VERSION_OR_CIPHER_MISMATCH  error after accessing confluence server through port 8443.

[Shannon S]

Hello Usman,

Thank you for contacting us about this. Let's see what the issue is so we can get you up and running.

I am using this article as an example:

• How to Fix ERR_SSL_VERSION_OR_CIPHER_MISMATCH Error.

The reason behind ERR_SSL_VERSION_OR_CIPHER_MISMATCH error is depreciation of the RC4 cipher. The RC4 cipher is deemed insecure, and Chrome doesn’t want you or your users to be in danger.

Step 1: Go to SSL Labs

First, go to https://www.ssllabs.com/

Step 2: Check your SSL certificate

• Go to Test your server

• Enter your hostname. For example, yourdomainname.com

• Click Submit

Once you test your SSL, you can use the information you found there and follow steps 3 through 5 from the above article.

Let us know the results of your test and any details you find.

Thank you for your help!

Regards,

Shannon