SSL_ERROR_NO_CYPHER_OVERLAP

Marcel Tomaskovic

Hi guys,

I have a JIRA 7.6.0 and I need run my JIRA over SSL.

I have *.pem certificate and I was import to keystore:

keytool -import -alias myjiraserver01.semething.local -keystore /opt/atlassian/jira/jre/lib/security/cacerts02 -file /tmp/mypfx.pem

 

I was update my server.conf file:

<Connector port="443" maxHttpHeaderSize="8192" SSLEnabled="true"
              maxThreads="150" minSpareThreads="25"
              enableLookups="false" disableUploadTimeout="true"
              acceptCount="100" scheme="https" secure="true"
              clientAuth="false" sslProtocol="TLS" useBodyEncodingForURI="true"
              keystoreFile="/opt/atlassian/jira/jre/lib/security/cacerts02" keystorePass="changeit" keystoreType="JKS"/>

 

But I still got this error: SSL_ERROR_NO_CYPHER_OVERLAP

Can you please help me?

Thank you!

miikhy

Hi Marcel, 

This error is shown where your certificate encryption algorithm and generated ciphers are not supported by your Tomcat Connector. You can either use keytools to generate a certificate using RSA which is supported by the default ssl connector in Tomcat or use the following parameter within your connector to include any cipher:

<span>ciphers</span><span>=</span><span>"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_RC4_128_SHA"</span>

 Hope this helps!

Cheers