Confluence and SSL

Confluence can be configured to use SSL both as a client (i. e. when communicating with other services) and as a server (i.e. when communicating with a user's web browser or RSS client).

The process of configuring Confluence to serve content over SSL is described on this page: Running Confluence Over SSL or HTTPS.

The process of configuring Confluence to connect to other services (such as JIRA or LDAP) is described on this page: Connect to LDAP, JIRA or Other Services Via SSL.

SSL Configuration Troubleshooting

• Page:
  Confluence could not run through SSL due to jsse.invalid_ssl_conf
• Page:
  LDAP Communication Exception Due to PKIX Path Building Fail after Confluence Upgrade
• Page:
  Security tools report the default SSL Ciphers are too weak
• Page:
  SSL Connector Fails to Initialize During Tomcat Startup
• Page:
  SSL Does Not Work after Upgrading Confluence to 2.10 or Later
• Page:
  SSL Requests are Not Redirected to the Correct Port

SSL Certificate Troubleshooting

• Page:
  CCMA Errors with Not Authorized URL's in Confluence Server/Data Center
• Page:
  Confluence Seems to Hang on Startup with SQL Server
• Page:
  javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
• Page:
  Security Certificate Warnings When Accessing Confluence
• Page:
  The Atlassian Marketplace Server is not Reachable Due to Peer Not Authenticated
• Page:
  Unable to Connect to SSL Services due to PKIX Path Building Failed
• Page:
  Unable to Install Plugin Due to Maven SSL

SSL Browser Related Troubleshooting

• Page:
  'Your security settings do not allow websites to use ActiveX controls' Message after Upgrade
• Page:
  IE Warns about Mixed-Mode Content (HTTP and HTTPS) Due to Mod_pagespeed
• Page:
  Unable to Download Attachments in IE over SSL
• Page:
  Unable to open PDF and PPT files using SSL and Internet Explorer

SSL How-to Articles

• Page:
  How to disable SSLv3 to mitigate against POODLE exploit for Confluence 5.7.0 or below