Rao,
I agree with Will, using latest server is always better.
Regarding your SSL error, let's try to update your java keystore as well. In 2.4.x it's inside /etc/ssh/certs/java/
After updating your certs inside /etc/certs, convert that httpd.crt to DER. And after that, insert that DER into cacerts using keytool (or whichever tool you prefer), restart all services ( opendj, httpd and tomcat ).
Let's see how that goes.