Jira fails to load on https after upgrading to v6.4.12 from v6.2.4

monika kiran

Hi All,

We have recently upgraded our JIRA from 6.2.4 to 6.4.12 on test environment. The problem now is the application loads fine on http but doesn't load on https. Please find the error details below:

On chrome: ERR_SSL_VERSION_OR_CIPHER_MISMATCH

On Firefox: Your connection is not secure

I have also tried accessing the URL on the server and got the below error

wget on https gave 

OpenSSL: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
Unable to establish SSL connection error

where as, on http it gave 200 OK.

Our server.xml looks like the below:

<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol"
maxHttpHeaderSize="8192" SSLEnabled="true"
maxThreads="150" minSpareThreads="25"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" useBodyEncodingForURI="true"
keystoreFile="certificatepath" keystorePass="password"/>

And SSL is configured in setenv.sh as the below

SSL_CERT_ARGS="-Djavax.net.ssl.trustStore=/home/jirauser/.keystore -Djavax.net.ssl.trustStorePassword=***** -Djavax.net.ssl.keyStore=/home/jirauser/.keystore -Djavax.net.ssl.keyStorePassword=*****"

I couldn't figure out the error. Please assist me in resolving this.

Thanks,

Monika

 

Nic Brough -Adaptavist-

That error means on e of three things usually - the server does not support the protocol in use, the server is configured to reject the cipher in use or your certificate is invalid or expired.

What server have you got in front of JIRA to provide the https and how is it configured for cipher and protocols?