Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Next challenges

Recent achievements

  • Global
  • Personal

Recognition

  • Give kudos
  • Received
  • Given

Leaderboard

  • Global

Trophy case

Kudos (beta program)

Kudos logo

You've been invited into the Kudos (beta program) private group. Chat with others in the program, or give feedback to Atlassian.

View group

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

javax.net.ssl.SSLHandshakeException

Hi Guys,

We have a funny issue with out SSL certs and confluence install. We are seeing the following error message when we are trying to sync via LDAP.

at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:549)
Caused by: javax.naming.CommunicationException: ldaps.****:636 [Root exception is javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure]

 

The thing is that all our instances broke at the same time. I can confirm we have around 50 other services using the LDAP service fine. (this is provided by out F5 LTM to a domain controller pool)

I can confirm the following

  • \lib\security\cacerts have the valid root CA (fingerprint checked)
  • \lib\security\cacerts have the valid Intermediate (fingerprint checked)
  • All checks within Confluence pass and valid.
  • When a sync is kicked off it will start the process and randomly fail at various stages with the above message.
  • nmap of ciphers on the domain controllers are all the same
  • have tried the sslpoke.java but cant get it to supply any results.

 Any ideas would be awesome if you have seen this before.

Cheers

R

2 answers

I suggest you download the SSL cert of the ldaps and import that into the keystore of confluence, if not there already.

#Download:
echo "" | openssl s_client -connect yourLDAPShostname:636 -prexit 2>/dev/null | sed -n -e '/BEGIN\ CERTIFICATE/,/END\ CERTIFICATE/ p' > ldaps.pem

#Convert from pem to der:

openssl x509 -outform der -in ldaps.pem -out ldaps.der

#import it:

/PATHTOJDKKEYTOOL/keytool -import -alias ldaps -file ldaps.der -keystore /lib/security/cacerts

These commands are all linux-formated as you can see, feel free to Windows-ify them smile

0 votes
rrudnicki Atlassian Team Dec 21, 2015

Hi Ryan, 

 

Can you confirm if your Confluence Certificate is loaded on your LDAP and the LDAP certificate is loaded on Confluence? Check the Jonas’  comment. 

Also, can you confirm what JAVA are you using? Keep in mind that JDK and JRE have store certificates in different directories. 

Lastly,  the name of the instances (Confluence and LDAP Server are matching with the certificates?

 

Cheers, 

Renato 

Hi there,

Where I can find the Confluence Certificate? 

as I have the same issue and imported the LDAP cert inside the Jira. but not vise versa ?? 

Like Ryan Minty likes this

Can you help,Ryan.. 

 

where I can find the Confluence Certificate ? 

Suggest an answer

Log in or Sign up to answer
TAGS
Community showcase
Published in Confluence

Announcing Team Calendars in Confluence Data Center

Hi Community! We're thrilled to share that Team Calendars for Confluence is now a built-in feature for Confluence Data Center releases 7.11 and beyond.  A long time favorite,  Team Cale...

177 views 0 6
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you