This depends on what layer is doing the SSL.
If you're doing it with Tomcat, go to <jira install>/conf and edit the server.xml for the sslProtocol line, removing the ones you don't want.
If you're doing it with a proxy, modify the proxy server settings to disable protocols you don't want.
How specifically does one change this? i am trying to deactivate tls 1.0 and 1.1 which jira was found to be running by security audit. i attempted to change the server.xml file located at
c:\Program Files\Atlassian\JIRA\conf\server.xml
to
sslProtocol="TLSv1.2+TLSv1.3" (was previously just the string TLS)
but this does not work after restarting the service. TLS 1.0 and 1.1 are still advertised. Please advise if you know a way to change this. thanks
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.