Community
Q&A
Jira
Questions
Confluence and JIRA Security - Diffie-Hellman for TLS

Confluence and JIRA Security - Diffie-Hellman for TLS

Hi,

tested Confluence and JIRA against https://weakdh.org/sysadmin.html

Both are affected.

Tried to add the cipher attribute to the SSL-Connector in server.xml.

After that Confluence's Sidebar was hidden an the possibility to edit documents in attachments was gone.

How did/do you fix that issue?

Cheers,

Mario

2 answers

1 accepted

Comments for this post are closed

Community moderators have prevented the ability to post new answers.

0 votes

Answer accepted

You can change the Attribute within the Apache and leave the Tomcat be.

Its never a good idea to run a tomcat directly.

Always use an Apache as Proxy.

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

0 votes

What does this have to do with Atlassian? Shouldn't this all be configured in Apache?

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

Is this behaviour related to Apache Tomcat, too? -> "After that Confluence's Sidebar was hidden an the possibility to edit documents in attachments was gone. "

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Forums

Q&A

Community resources

Support

Top groups

Community resources

Support

Learn

Community resources

Support

Events

Community resources

Support

Confluence and JIRA Security - Diffie-Hellman for TLS

2 answers

1 accepted

Comments for this post are closed

Was this helpful?

Thanks!

TAGS

Community showcase

Atlassian Community Events