SNI support (apache configured with multiple SSL certificates)

Question

We have a single machine - single IP running multiple instances (JIRA / Confluence ...)

* https://jira.domain1com
* https://wiki.domain1.com
* https://jira.domain2.com

We have SSL enabled on all instances;  This works fine when accessing the service through a browser (using SNI).   When using applicaiton links to link a confluence page from wiki.domain1.com to jira.domain1.com
things fail with

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException

This is because apache is returning the certificate of jira.domain2.com

Is SNI supported by the application links, and if not does someone knows how to fix this issue ?

Francis

darylchuah · Answer

Hi Francis

Currently Atlassian products does not support the integration of SNI yet however we do have some feature requests being raised to their own respective product:

* JRA-24515 - JIRA should support the use of TLS - SNI
* STASH-2970 - SNI not supported

Please feel free to vote on it to increase its popularity and add yourself as watcher in order to receive any latest updates from the developer and feedback from other user that is facing the same issue.

For more information on how Atlassian implements new features and improvement please see the following document: Implementation of New Features and Improvements.

francis · Answer

Found 
https://jira.atlassian.com/browse/JRA-24515

It is not supported.