Web browser prompts to select SSL certificate when viewing Bitbucket web site

[Neal Culiner]

I'm running bitbucket server version 7.14.0 on Windows server. Have been using it for years without issue, always keeping it up to date. Several months ago when going to my bitbucket web site Google Chrome prompts for a SSL certificate to choose. I click cancel and it goes to the site. The SSL cert is valid (https://bitbucket.nc-software.com) but I have no clue why when going to this web site I'm prompted for a certificate. I use this same cert with JIRA, Confluence, Bamboo, and Crowd and have no issues going to those sites. 

Any suggestions as why Bitbucket is doing this? I don't think it's specific to Google Chrome, that's just the browser I use. My team has also had issues with Safari on macOS. 

[Kurt Klinner · Accepted solution]

Hi @Neal Culiner 

the ssl config of your bitbucket and jira instance differs. 

Assuming that you have an LB/reverse proxy in front of the instances where ssl gets terminated i would see if the config differs.

If you are accessing bb or jira directly then you need to review the ssl settings there.

Let me know how it's going

Cheers

Kurt

[Neal Culiner]

Thank you for the reply and info. Both are on the same server. It looks like I need to review the bitbucket config to only allow the higher TLS and see if that helps.

[Neal Culiner]

I made a few revisions for the TLS 1.0 and 1.1 as I found the property I needed for that. I turned off public access to the Bitbucket 7999 port for SSH as I only need that for internal use behind the firewall. So far so good, will continue to monitor.