How to run jira server only in Tls 1.2

pavan kumar February 10, 2019
How to run server in only tls1.2

1 answer

1 vote
Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
February 10, 2019

This depends on what layer is doing the SSL.

If you're doing it with Tomcat, go to <jira install>/conf and edit the server.xml for the sslProtocol line, removing the ones you don't want.

If you're doing it with a proxy, modify the proxy server settings to disable protocols you don't want. 

JiraYo
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
March 2, 2020

How specifically does one change this? i am trying to deactivate tls 1.0 and 1.1 which jira was found to be running by security audit. i attempted to change the server.xml file located at

c:\Program Files\Atlassian\JIRA\conf\server.xml

to

sslProtocol="TLSv1.2+TLSv1.3" (was previously just the string TLS)

but this does not work after restarting the service. TLS 1.0 and 1.1 are still advertised. Please advise if you know a way to change this. thanks

Suggest an answer

Log in or Sign up to answer