javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake IN jira server

[gadamchetty ramya]

This is happening when trying to authenticate with LDAP .
Because of this issues our custom plugins are unable to fetch data or process the execution .please suggest how to resolve below issue in jira .

Caused by: org.springframework.ldap.CommunicationException: ; nested exception is javax.naming.CommunicationException: [Root exception is javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake]
at org.springframework.ldap.support.LdapUtils.convertLdapException(LdapUtils.java:108)
at org.springframework.ldap.core.support.AbstractContextSource.createContext(AbstractContextSource.java:356)
at org.springframework.ldap.core.support.AbstractContextSource.doGetContext(AbstractContextSource.java:140)
at org.springframework.ldap.core.support.AbstractContextSource.getReadWriteContext(AbstractContextSource.java:175)
at org.springframework.ldap.transaction.compensating.manager.ContextSourceTransactionManagerDelegate.getNewHolder(ContextSourceTransactionManagerDelegate.java:96)
... 131 more
Caused by: javax.naming.CommunicationException: [Root exception is javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake]


Thanks in advance 

[Nic Brough -Adaptavist- · Accepted solution]

This usually means that one of the two sides is using a protocol the other one does not support.

Best guess is that the Java you are Jira with does not support TLS1.0 or 1.2 because they were compromised a few years ago and you should not be using them.  If that is the case, the correct thing to do is upgrade your LDAP server to something secure, or configure it for a secure protocol.

[Rahul Dwivedy]

validate ur ldap server using SSL certificate or not? if yes download certificate and make entry in java trusted certificates inside your JIRA_HOME like this...

keytool -import -file <your certificate>.cer -alias jira -keystore "%JIRA_HOME%\jre\lib\security\cacerts"

 keystore password is "changeit"