how to disable TLSv1.0/1 for Bitbucket server docker image

DIP IT Team

Hi all,

how to disable deprecated TLSv1.0 and 1.1 for docker image in compose yml? (and also weak/deprecated ciphers)

 

It’s stated here https://community.atlassian.com/t5/Bitbucket-questions/How-to-disable-TLS1-0-and-1-1-on-Bitbucket/qaq-p/1038891 what I can implement in a running container (in ../shared/bitbucket.properties), but what about the initial docker compose options? (I guessing some ‘environment’ options need to be set)

Dave Chevell

Hey @DIP IT Team 

For most bitbucket.properties entries, the magic of Spring Boot will let you specify equivalent environment variables to apply their configuration.

For example, from the post you linked:

server<span>.ssl</span><span>.enabled</span>=true
server<span>.ssl</span><span>.enabled-protocols</span>=TLSv1.<span>2</span>

These can be set as environment variables, by substituting underscores for dots/dashes and using uppercase:

SERVER_SSL_ENABLED=true
<span>SERVER_SSL_ENABLED_PROTOCOLS</span>=TLSv1.<span>2</span>

 Set that up in your environment / in your docker compose file and you should be all set!