SSL_ERROR_NO_CYPHER_OVERLAP

[Marcel Tomaskovic]

Hi guys,

I have a JIRA 7.6.0 and I need run my JIRA over SSL.

I have *.pem certificate and I was import to keystore:

keytool -import -alias myjiraserver01.semething.local -keystore /opt/atlassian/jira/jre/lib/security/cacerts02 -file /tmp/mypfx.pem

I was update my server.conf file:

<Connector port="443" maxHttpHeaderSize="8192" SSLEnabled="true"
              maxThreads="150" minSpareThreads="25"
              enableLookups="false" disableUploadTimeout="true"
              acceptCount="100" scheme="https" secure="true"
              clientAuth="false" sslProtocol="TLS" useBodyEncodingForURI="true"
              keystoreFile="/opt/atlassian/jira/jre/lib/security/cacerts02" keystorePass="changeit" keystoreType="JKS"/>

But I still got this error: SSL_ERROR_NO_CYPHER_OVERLAP

Can you please help me?

Thank you!

[Abby Maris]

The error SSL_ERROR_NO_CYPHER_OVERLAP when you are trying to access a website, and your browser cannot fetch the security data. This is because the website owners use SSL certificates to secure the interacted data between the user and the domain server. This error occurs wherever your browser cannot fetch appropriate security information of the website it tries to connect to.

 Among various reasons for this error, misconfigured browser settings in your local Firefox could be one of them. Another reason for this is an issue on the server side, i.e., the website itself. Your browser settings must be configured if you face the same error on many websites. there are many different ways to fix the error some can be as follows like:-

1) Update Firefox browser

2) Reset Your Browser to Default Settings

3) Bypass Security Protocols and Configurations of Your Browser

I hope it helps!

[Athman Boukhaoua]

That solution didn't work for me, in fact when I added that ciphers parameter to the connector the server completely stopped offering HTTPS connections.

[Chris Ruggieri]

I am having the same issue on Confluence.  I was given the same advice (add the ciphers) with the same result.

[miikhy]

Hi Marcel, 

This error is shown where your certificate encryption algorithm and generated ciphers are not supported by your Tomcat Connector. You can either use keytools to generate a certificate using RSA which is supported by the default ssl connector in Tomcat or use the following parameter within your connector to include any cipher:

ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_RC4_128_SHA"

 Hope this helps!

Cheers

[Florian Hartjen]

No, it doesn't, unfortunately.