JIRA and TLS 1.2 Support

[Rusty Watrous]

Hello,

I'm a new comer to JIRA.

I've been asked to determine if the JIRA products we have installed : JIRA, Confluence, etc will work with ONLY TLS 1.2 enabled.

i.e. will they break if we disable TLS 1.0 and 1.1 ?

Thanks,

[Ed Henderson]

oops

[JiraYo]

How specifically does one change this? i am trying to deactivate tls 1.0 and 1.1 which jira was found to be running by security audit. i attempted to change the server.xml file located at

c:\Program Files\Atlassian\JIRA\conf\server.xml

to

sslProtocol="TLSv1.2+TLSv1.3" (was previously just the string TLS)

but this does not work after restarting the service. TLS 1.0 and 1.1 are still advertised. Please advise if you know a way to change this. thanks

[JiraYo]

sorry i replied to the wrong thread here, and cant figure out how to delete it. link to other thread which is more appropriate.

https://community.atlassian.com/t5/Jira-questions/How-to-run-jira-server-only-in-Tls-1-2/qaq-p/1003356

[Ed Henderson]

You need to also add the Connector attribute: 

     sslEnabledProtocols="TLSv1.2+TLSv1.3"

This will determine what TLS versions are available to use.

Ed.

[Mirek]

It should work. JIRA and other major Atlassian products are using already Java 8 that is adding TLSv1.2 support.