How to enable sslv3 protocol on Confluence tomcat server?

Question

Hi All

I have confluence 5.10 installed on with the packaged tomcat on windows platform.

We have a third party application which can communicate to confluence only over sslv3 protocol.

My question is how can enable the tomcat on confluence server to accept handshakes in sslv3 protocol (in addition to tlsv1, tlsv1.1 and tlsv1.2).

Rahul

AnnWorley · Answer

@Rahul Aich [Nagra] If you are running Confluence as a service on Windows the setenv.bat parameters are ignored so you will need to add the option as described in: Configuring System Properties There is a command line and a registry method in the guide as well as screen shots.

Nic Brough -Adaptavist- · Answer

Good good. Yes, it's pretty much the same in all operating systems. Find the setenv.bat (setenv.sh on Unix-like systems). Open it up with a text editor and look for where -D is used. Jira's setenv files tend to have a line near the top which says "put debug arguments in here", followed by JVM_ARG="", and it's best to use that for Jira. Confluence varies by version. In 6.3, there's a lot of lines like CATALINA_OPTS="-Djava.awt.headless=true ${CATALINA_OPTS}" You can add one for this: CATALINA_OPTS="-Djdk.tls.disabledAlgorithms= ${CATALINA_OPTS}" Note that this enables a number of other insecure protocols, not just sslv3

Rahul Aich [Nagra] · Answer

Thanks Mizan and Nic i understand the risks involved and will not disable them permanently. But in order to confirm my root cause of our connectivity issue i would like to disable them on my test confluence server.

Do you know how to do it on windows platform?