HTTPS not working after updating from 4.5.1 to 4.22

[Ahmet Aydin]

Hello,

I'm trying to update to the latest version of Jira Servicemanagement. Unfortunately, my server.xml doesn't work anymore on version 4.22. I am using the Docker version of service management. It worked without problems for 2 years.

Port 8080 works well, but on port 8443 i get "This site can’t be reached". 

I researched now for two days without a clue...

My Docker run command:

docker run -v jira-servicemanagement-logs-4.20.6:/opt/atlassian/jira/logs -v jira-servicemanagement-data-4.20.6:/var/atlassian/application-data/jira -e TZ=Europe/Berlin --name jira-servicemanagement-4.20.6 -d -p 8080:8080 -p 8443:8433 --restart=always --network jira-network --hostname=CANT SHOW YOU 8dc106d978c3

My server.xml:

<?xml version="1.0" encoding="utf-8"?>

<Server port="8005"
shutdown="SHUTDOWN">

<Listener className="org.apache.catalina.startup.VersionLoggerListener"/>
<Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on"/>
<Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener"/>
<Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener"/>
<Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener"/>

<Service name="Catalina">

<Connector port="8080"
maxThreads="100"
minSpareThreads="10"
connectionTimeout="20000"
enableLookups="false"
protocol="HTTP/1.1"
redirectPort="8443"
acceptCount="10"
secure="false"
scheme="http"
proxyName=""
proxyPort=""

relaxedPathChars="[]|"
relaxedQueryChars="[]|{}^\`&quot;&lt;&gt;"
bindOnInit="false"
maxHttpHeaderSize="8192"
useBodyEncodingForURI="true"
disableUploadTimeout="true" />

<Connector port="8443"
relaxedPathChars="[]|"
relaxedQueryChars="[]|{}^&#x5c;&#x60;&quot;&lt;&gt;"
protocol="org.apache.coyote.http11.Http11NioProtocol"
maxHttpHeaderSize="8192"
SSLEnabled="true"
maxThreads="150"
minSpareThreads="25"
enableLookups="false"
disableUploadTimeout="true"
acceptCount="100"
scheme="https"
secure="true"
sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2,TLSv1.3"
clientAuth="false"
useBodyEncodingForURI="true"
keyAlias="1"
keystoreFile="/var/atlassian/application-data/jira/jirasd.jks"
keystorePass="examplepw"
keystoreType="JKS"/>

<Engine name="Catalina"
defaultHost="localhost">

<Host name="localhost"
appBase="webapps"
unpackWARs="true"
autoDeploy="true">

<Context path=""
docBase="${catalina.home}/atlassian-jira"
reloadable="false"
useHttpOnly="true">
<Resource name="UserTransaction"
auth="Container"
type="javax.transaction.UserTransaction"
factory="org.objectweb.jotm.UserTransactionFactory"
jotm.timeout="60"/>
<Manager pathname=""/>
<JarScanner scanManifest="false"/>
<Valve className="org.apache.catalina.valves.StuckThreadDetectionValve"
threshold="120" />
</Context>

</Host>
<Valve className="org.apache.catalina.valves.AccessLogValve"
pattern="%a %{jira.request.id}r %{jira.request.username}r %t &quot;%m %U%q %H&quot; %s %b %D &quot;%{Referer}i&quot; &quot;%{User-Agent}i&quot; &quot;%{jira.request.assession.id}r&quot;"/>
</Engine>

</Service>
</Server>

My JKS:

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 2 entries

1, Dec 17, 2021, PrivateKeyEntry,
Certificate fingerprint (SHA-256): D1:11:2D:62:E0:4A:7C:4B:43:02:CC:06:4C:EE:77:8C:F4:9D:26:7B:7A:BF:7D:9B:30:91:EA:5E:C9:06:E1:1A
addtrustexternalcaroot, Dec 12, 2019, trustedCertEntry,
Certificate fingerprint (SHA-256): 7F:A4:FF:68:EC:04:A9:9D:75:28:D5:08:5F:94:90:7F:4D:1D:D1:C5:38:1B:AC:DC:83:2E:D5:C9:60:21:46:76

catalina.2022-03-02.log:

02-Mar-2022 21:12:09.707 WARNING [main] org.apache.tomcat.util.net.SSLHostConfig.setProtocols The protocol [TLSv1.1] was added to the list of protocols on the SSLHostConfig named [_default_]. Check if a +/- prefix is missing.
02-Mar-2022 21:12:09.710 WARNING [main] org.apache.tomcat.util.net.SSLHostConfig.setProtocols The protocol [TLSv1.2] was added to the list of protocols on the SSLHostConfig named [_default_]. Check if a +/- prefix is missing.
02-Mar-2022 21:12:09.710 WARNING [main] org.apache.tomcat.util.net.SSLHostConfig.setProtocols The protocol [TLSv1.3] was added to the list of protocols on the SSLHostConfig named [_default_]. Check if a +/- prefix is missing.
02-Mar-2022 21:12:09.767 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version name: Apache Tomcat/8.5.72
02-Mar-2022 21:12:09.768 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server built: Oct 1 2021 15:15:33 UTC
02-Mar-2022 21:12:09.768 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version number: 8.5.72.0
02-Mar-2022 21:12:09.768 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Name: Linux
02-Mar-2022 21:12:09.768 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Version: 3.10.0-1062.4.1.el7.x86_64
02-Mar-2022 21:12:09.768 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Architecture: amd64
02-Mar-2022 21:12:09.768 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Java Home: /opt/java/openjdk
02-Mar-2022 21:12:09.768 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Version: 11.0.14.1+1
02-Mar-2022 21:12:09.769 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Vendor: Eclipse Adoptium
02-Mar-2022 21:12:09.769 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_BASE: /opt/atlassian/jira
02-Mar-2022 21:12:09.769 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_HOME: /opt/atlassian/jira
02-Mar-2022 21:12:09.769 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.lang=ALL-UNNAMED
02-Mar-2022 21:12:09.769 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.io=ALL-UNNAMED
02-Mar-2022 21:12:09.769 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.util=ALL-UNNAMED
02-Mar-2022 21:12:09.769 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.util.concurrent=ALL-UNNAMED
02-Mar-2022 21:12:09.769 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
02-Mar-2022 21:12:09.770 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.config.file=/opt/atlassian/jira/conf/logging.properties
02-Mar-2022 21:12:09.770 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
02-Mar-2022 21:12:09.770 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Xms384m
02-Mar-2022 21:12:09.770 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Xmx6120m
02-Mar-2022 21:12:09.770 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -XX:InitialCodeCacheSize=32m
02-Mar-2022 21:12:09.770 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -XX:ReservedCodeCacheSize=2000m
02-Mar-2022 21:12:09.770 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.awt.headless=true
02-Mar-2022 21:12:09.770 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Datlassian.standalone=JIRA
02-Mar-2022 21:12:09.770 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.apache.jasper.runtime.BodyContentImpl.LIMIT_BUFFER=true
02-Mar-2022 21:12:09.770 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dmail.mime.decodeparameters=true
02-Mar-2022 21:12:09.771 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.dom4j.factory=com.atlassian.core.xml.InterningDocumentFactory
02-Mar-2022 21:12:09.771 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -XX:-OmitStackTraceInFastThrow
02-Mar-2022 21:12:09.771 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.locale.providers=COMPAT
02-Mar-2022 21:12:09.771 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djira.home=/var/atlassian/application-data/jira
02-Mar-2022 21:12:09.771 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Datlassian.plugins.startup.options=-fg
02-Mar-2022 21:12:09.771 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djdk.tls.ephemeralDHKeySize=2048
02-Mar-2022 21:12:09.771 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.protocol.handler.pkgs=org.apache.catalina.webresources
02-Mar-2022 21:12:09.771 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.apache.catalina.security.SecurityListener.UMASK=0027
02-Mar-2022 21:12:09.773 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Xlog:gc*:file=/opt/atlassian/jira/logs/atlassian-jira-gc-%t.log:tags,time,uptime,level:filecount=5,filesize=20M
02-Mar-2022 21:12:09.773 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -XX:+ExplicitGCInvokesConcurrent
02-Mar-2022 21:12:09.774 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dignore.endorsed.dirs=
02-Mar-2022 21:12:09.774 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.base=/opt/atlassian/jira
02-Mar-2022 21:12:09.774 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.home=/opt/atlassian/jira
02-Mar-2022 21:12:09.774 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.io.tmpdir=/opt/atlassian/jira/temp
02-Mar-2022 21:12:09.774 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent The Apache Tomcat Native library which allows using OpenSSL was not found on the java.library.path: [/usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib]
02-Mar-2022 21:12:09.927 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["http-nio-8080"]
02-Mar-2022 21:12:09.944 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["https-jsse-nio-8443"]
02-Mar-2022 21:12:10.110 INFO [main] org.apache.tomcat.util.net.NioSelectorPool.getSharedSelector Using a shared selector for servlet write/read
02-Mar-2022 21:12:10.114 INFO [main] org.apache.catalina.startup.Catalina.load Initialization processed in 849 ms
02-Mar-2022 21:12:10.148 INFO [main] org.apache.catalina.core.StandardService.startInternal Starting service [Catalina]
02-Mar-2022 21:12:10.148 INFO [main] org.apache.catalina.core.StandardEngine.startInternal Starting Servlet engine: [Apache Tomcat/8.5.72]
02-Mar-2022 21:12:14.423 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["http-nio-8080"]
02-Mar-2022 21:12:14.424 INFO [main] org.apache.tomcat.util.net.NioSelectorPool.getSharedSelector Using a shared selector for servlet write/read
02-Mar-2022 21:12:14.457 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["https-jsse-nio-8443"]
02-Mar-2022 21:12:14.460 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in 4345 ms

[Artur Moura · Accepted solution]

Hi @Ahmet Aydin

What is the address and port you are trying to access?

Here we can see Docker trying to use the 8433 port, instead of 8443. 

-p 8443:8433

In case you want to export the 8433, I believe you should switch them.

Hope it helps.

[Ahmet Aydin]

Hi @Artur Moura

Thanks for the hint. It should be 8443:8443 and not 8433.
This expose was the cause. I had a typo. Now HTTPS is working as expected again.

Thanks! Can be closed.

[Artur Moura]

Awesome @Ahmet Aydin!

Glad to hear the issue is solved!