Confluence and JIRA Security - Diffie-Hellman for TLS

[Mario Günter]

Hi,

tested Confluence and JIRA against https://weakdh.org/sysadmin.html

Both are affected. 

Tried to add the cipher attribute to the SSL-Connector in server.xml. 

After that Confluence's Sidebar was hidden an the possibility to edit documents in attachments was gone. 

How did/do you fix that issue? 

Cheers, 

Mario

[Christian Schuster · Accepted solution]

You can change the Attribute within the Apache and leave the Tomcat be.

Its never a good idea to run a tomcat directly.

Always use an Apache as Proxy.

[Timothy]

What does this have to do with Atlassian? Shouldn't this all be configured in Apache?

[T_CON GmbH _ Co_ KG]

Is this behaviour related to Apache Tomcat, too? -> "After that Confluence's Sidebar was hidden an the possibility to edit documents in attachments was gone. "