nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Confluence API TLS Issues

Jason Abergel

Hi All,

We recently migrated to a new MS 2016 Server (from 2008R2) running Confluence 6.7.1 Server via IIS and since then, we have encountered an issue with the API.

We have a PS script that fetches attachments from Confluence and stores them to a local directory via the API. On the old server this worked fine but on the new server, no go.

Interestingly enough, if we enable TLS 1.0, 1.1 and 1.2, the script works, but with only TLS 1.2 enabled, we get the following error.

Invoke-WebRequest : The underlying connection was closed: An unexpected error occurred on a send.

I have tried adding the following to the Connector port in the server.xml, but this did not work either.

sslProtocol="TLSv1.2" sslEnabledProtocols="TLSv1.2" SSLEnabled="true"/>

Neither did uncommenting out the Connector port for 8443.

At this point I am fresh out of ideas and would love for your assistance.

Thank you for your time!

Jay

Accepted answers

Boris Berenberg - Atlas Authority

Are you terminating SSL at IIS or Confluence? Looks like this may be a PS script issue with .NET: https://stackoverflow.com/questions/36265534/invoke-webrequest-ssl-fails

All comments

Boris Berenberg - Atlas Authority

Are you terminating SSL at IIS or Confluence? Looks like this may be a PS script issue with .NET: https://stackoverflow.com/questions/36265534/invoke-webrequest-ssl-fails

Jason Abergel

SSL is configured at the IIS level and not in Tomcat. The script runs fine as long as TLS 1.0 and 1.1 are enabled. Once removed the script no longer works.

Boris Berenberg - Atlas Authority

So then yeah it sounds like an issue with the script, not Confluence or IIS. See my other links.

Jason Abergel

That was it. I added the following variable to the script and it worked like a charm.

$AllProtocols = [System.Net.SecurityProtocolType]'Tls12'
[System.Net.ServicePointManager]::SecurityProtocol = $AllProtocols

Thank you so much for your time

Have a good day, Cheers!

alex flora

I also needed to add the following line on my get requests when doing a lot of scripted additions:

# Reset current connection, resolves error "The underlying connection is closed"
[System.Net.ServicePointManager]::FindServicePoint($ConfluenceURL).ConnectionLimit = 1

Sometimes my script closed with the same error messages half-way running

So globally enable the tls12 protocol in the script and whenever i query for a pageid i run this line before runing the query

The variable $ConfluenceURL points to the url of our main confluence site

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence