High Description
Workaround
There are currently three options available to work around this issue until https://rhn.redhat.com/errata/RHBA-2014-1797.html is fixed.
- Use Oracle JDK 1.8
- Use Open JDK 1.7 (or a version prior to those listed in https://rhn.redhat.com/errata/RHBA-2014-1797.html) Our supported platforms matrix has been updated to reflect this.
- set jdk.tls.disabledAlgorithms=EC,ECDHE,ECDH in $JAVA_HOME/jre/lib/security/java.security on the broken OpenJDK 1.8
Diagnosis
After upgrading to 3.5.0 Application Link function from Stash to JIRA doesn't work and the error below is shown on the UI:
javax.net.ssl.SSLException: java.lang.RuntimeException: java.security.NoSuchAlgorithmException: EC AlgorithmParameters not available
Logs:
2015-01-02 20:51:53,279 WARN [http-nio-7990-exec-1] User @NSUSMRx1251x401x0 rf9x8p <IP>,<IP>,127.0.0.1 "GET /rest/jira-integration/latest/issues HTTP/1.1" c.a.i.i.jira.DefaultJiraService Problem communicating with JIRA com.atlassian.sal.api.net.ResponseException: javax.net.ssl.SSLException: java.lang.RuntimeException: java.security.NoSuchAlgorithmException: EC AlgorithmParameters not available
It is not possible to access Marketplace either. The following entries can be found in your logs:
2014-12-23 01:33:05,064 WARN [clusterScheduler_Worker-1] com.atlassian.upm.pac.PacClientImpl Error when querying application info from MPAC: com.atlassian.marketplace.client.MpacException: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
2014-12-18 16:32:28,461 WARN [http-nio-7990-exec-1] DGibson @31RHF4x992x299x0 rf85q7 <IP>,<IP> "GET /projects HTTP/1.1" com.atlassian.upm.pac.PacClientImpl Error when querying application info from MPAC: com.atlassian.marketplace.client.MpacException: javax.net.ssl.SSLException: java.lang.RuntimeException: java.security.NoSuchAlgorithmException: EC AlgorithmParameters not available
We've observed issues specifically with java-1.8.0-openjdk-1.8.0.25