Connect to LDAP via SSL - Confluence User Guides and Documents

Atlassian User LDAP supports connecting to an LDAP server over SSL/HTTPS.

Import your LDAP server's public certificate into the [Confluence JVM keystore]
Edit the file in your Confluence install directory, \confluence\WEB-INF\classes\atlassian-user.xml and set the <securityProtocol>ssl</securityProtocol>
Switch the LDAP connection to the SSL port if different from the default LDAP port. If you're using the most common LDAPS port, set <port>636</port>
Add the self-signed root certificate to your default Java keystore with the following command:
```
keytool -import -alias serverCert -file <RootCertificate.crt> -keystore %JRE_HOME%/lib/security/cacerts
```
The keytool will ask you for a password. The default password is "changeit" without the quotes
Verify that the certificate has been added successfully by entering the following command:
```
keytool -list -keystore %JRE_HOME%/lib/security/cacerts
```