SSLProtocolException using crowd as user-directory in stash

Frank Kubis

We running Confluence, JIRA, Stash and Crowd behind apache as proxy. 

I tried to add crowd to stash as user-directory, but getting the exception:

javax.net.ssl.SSLProtocolException: handshake alert: unrecognized_name

Bildschirmfoto vom 2015-01-08 17:52:35.png

For JIRA and Confluence our configuration works. Is there some special to do for Stash?

Bildschirmfoto vom 2015-01-08 17:52:35.png

Matheus Fernandes

I have found two articles mentioning that setting the "-Djsse.enableSNIExtension=false" flag could possibly fix this:

• https://answers.atlassian.com/questions/208284
• https://code.google.com/p/zaproxy/issues/detail?id=1225

From the first link:

Java 7 introduced SNI support which is enabled by default. I have found out that certain misconfigured servers send an "Unrecognized Name" warning in the SSL handshake which is ignored by most clients... except for Java.

It's not something with Stash itself, but possibly a misconfiguration of its server.