Does Jira support more than 2048 key length of SSL certificate?

[Michal Harasymowicz]

Currently my instance of Jira is running over SSL with key length of 2048. We are planning in the future to use higher bit length - 4096. Does anyone have any experience to use 4096 bit length of certificate?

Documentation has information only about 2048.

If you have any details about that I will be grateful, thanks

Michal

[Nic Brough -Adaptavist- · Accepted solution]

Jira itself does no encryption, it relies on the application server, database, and/or network proxies for it, which sometimes rely on the underlying technology themselves.  If, for example, you're doing the encryption in Tomcat, that relies on the Java VM underneath it to do the encryption (and Java supports a lot more bits than 2048 - most of my clients start at 4096, but some use 8192 and a couple 16,384)

Are you doing your SSL at a proxy?  Or on the Tomcat Jira is running on?

[Michal Harasymowicz]

Hello Nic,

I'm running Jira on Tomcat. Ok I understand. So there shouldn't be any problem with higher key length. Thank you for quick answer, really helpful! 

[Nic Brough -Adaptavist-]

You shouldn't find any (significant) problems with quite large key-lengths - my users on 16k do mention it can be a bit slow at times, but they're in an industry where everything is slowed down by security - I'm not just talking encryption, it's taken me an hour to get to the right meeting room because of extra (partly random) checks...