nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Trying to enable encryption to sql database

Socko-71

I'm trying to get the Confluence database connection to use encryption: My current setting is: <property name="hibernate.connection.url">jdbc:jtds:sqlserver://xx-xxxx-dev.xxxxxxxxxxxx.com:49666/confluencedev_db;secure=true;useSSL=true;requireSSL</property> I have setup other connections on other apps using this connection:

jdbc.url=jdbc:sqlserver://xx-xxxx-dev.xxxxxxxxxxxx.com:49666;databaseName=BitBucket;instance=secure;encrypt=true;trustServerCertificate=true; This works just fine..any idea on the Confluence?

Accepted answers

All comments

AnnWorley

It's a known issue:

Oracle introduced a security fix for the SSL/TLS BEAST attack that is known to interfere with Microsoft JDBC/jTDS connections....

Official Bug Report:

https://bugs.openjdk.java.net/browse/JDK-8014272

To be able to connect to MS SQL securely you will have to disable the fix for the SSL/TLS BEAST attack, and hence, the DB server will be vulnerable to this type of attack. The instructions are described on Cannot Connect Confluence to MS SQL Server Using Force Encryption

Socko-71

Thanks for the reply but unfortunately the article refereed to the setenv.bat to look for the java options (java_opts). Our setenv.bat uses CATALINA_OPTS instead.

Thanks

AnnWorley

Hopefully you are installing Confluence as a service, in which case the catalina options are passed via the service rather than the setenv.bat. When Confluence starts as a service the parameters in sertenv.bat are ignored. This document has screen shots showing how to set the system properties for the Windows service: Windows service

Thank you for pointing out the oversight of the doc that fails to mention that CATALINA_OPTS have been used since Confluence 5.5. I will work on editing it.

Socko-71

No thanks you for just a fast response. I forwarded the link to our server team. I will let you know if it fixed my issue.

Thanks

Philbert Pagaspas

postgres jdbc:

Jira dbconfig.xml, append ?ssl=true

Confluence confluence.cfg.xml, append ?sslmode=require

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence