Pb configuring SSL on confluence server

[David Bizien]

Hi,

I want to configure Confluence to use SSL.

I have setup the .keystore in my home directory.

I have updated the server.xml

In the log catalina.out, I see no errors, the only reference is :

17-Feb-2018 01:31:26.356 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["http-nio-8090"]
17-Feb-2018 01:31:26.449 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["http-nio-8843"]

Nevertheless, when I test the url https://confluence.inventy.com:8843, it is not successfull.

Is there a way to increase the log to know where is the problem ?

If it is the case, what kind of log I need to setup ?

I know the .keystore is used because I used to have an error based on the password which have generated errors. Now it is solved and I get no error but no success either.

Regards,

David Bizien

[Thomas Deiler · Accepted solution]

Dear @David Bizien,

I cannot recommend running the SSL termination within tomcat. Use instead a proxy that listens on port 443 and redirects to 8090. This makes everything easier and you have the chance to redirect your users to a "Site is currently upgraded - please be patient" when you have a downtime during upgrades.

You can use Apache, nginx or haproxy (or anything else :).

So long

Thomas

[Thomas Deiler]

Dear

I guess you configured everything like described in this article, or?

What does it mean

Nevertheless, when I test the url https://confluence.inventy.com:8843, it is not successful.

What is the error message of your browser?

So long

Thomas

[David Bizien]

Hello,

Thanks a lot !!
Some times you need to ask yourself the right question !!

The error was saying "website inaccessible" but it was working on http / port 8090.

I do not know why but your question makes me wonder "May be everything is fine, may be there is no log because it is working, may be it is only the port which is not open on the network "

And it was the problem.

Thanks a lot for your time.

Regards

[David Bizien]

Hello,

I will have a reverse proxy setup in the future but we need an end to end SSL connexion. No password should transit on our network even internaly unencrypted.

That is why I need to setup the SSL. It worked perfectly on Jira and bitbucket.

I need to undestand why it is not working on confluence.

If you have any ideas how I can increase the logs on the subject could be great.

Regards,

David