SSL_ERROR_NO_CYPHER_OVERLAP

[Marcel Tomaskovic]

Hi guys,

I have a JIRA 7.6.0 and I need run my JIRA over SSL.

I have *.pem certificate and I was import to keystore:

keytool -import -alias myjiraserver01.semething.local -keystore /opt/atlassian/jira/jre/lib/security/cacerts02 -file /tmp/mypfx.pem

I was update my server.conf file:

<Connector port="443" maxHttpHeaderSize="8192" SSLEnabled="true"
              maxThreads="150" minSpareThreads="25"
              enableLookups="false" disableUploadTimeout="true"
              acceptCount="100" scheme="https" secure="true"
              clientAuth="false" sslProtocol="TLS" useBodyEncodingForURI="true"
              keystoreFile="/opt/atlassian/jira/jre/lib/security/cacerts02" keystorePass="changeit" keystoreType="JKS"/>

But I still got this error: SSL_ERROR_NO_CYPHER_OVERLAP

Can you please help me?

Thank you!

[Athman Boukhaoua]

That solution didn't work for me, in fact when I added that ciphers parameter to the connector the server completely stopped offering HTTPS connections.

[Chris Ruggieri]

I am having the same issue on Confluence.  I was given the same advice (add the ciphers) with the same result.

[miikhy]

Hi Marcel, 

This error is shown where your certificate encryption algorithm and generated ciphers are not supported by your Tomcat Connector. You can either use keytools to generate a certificate using RSA which is supported by the default ssl connector in Tomcat or use the following parameter within your connector to include any cipher:

ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_RC4_128_SHA"

 Hope this helps!

Cheers

[Florian Hartjen]

No, it doesn't, unfortunately.