Share SSL Certificate

[Joshua Kacen]

We currently have Confluence running over SSL on port A and have just installed Jira Service Desk on the same server which we want to use on port B.

How can we use the same SSL certificate for Jira Service Desk on port B without using proxies?

Do we just follow the steps here: https://confluence.atlassian.com/adminjiraserver073/running-jira-applications-over-ssl-or-https-861253906.html

[Kiran Panduga {Appfire} · Accepted solution]

Hi @Joshua Kacen , 

As you are not considering using the web server for reserve proxies, you can follow the instructions in the same link and import the SSL certs into the JAVA Keystore using the keytool command.

Thanks,

Kiran.

[Joshua Kacen]

Thanks.

I worked it out by adding the following to server.xml

<Connector port="HTTPs Port" protocol="org.apache.coyote.http11.Http11NioProtocol"
maxHttpHeaderSize="8192" SSLEnabled="true"
relaxedPathChars="[]|" relaxedQueryChars="[]|{}^&#x5c;&#x60;&quot;&lt;&gt;"
maxThreads="150" minSpareThreads="25"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
sslEnabledProtocols="TLSv1.2"
clientAuth="false" useBodyEncodingForURI="true"
keyAlias="Alias" keystoreFile="Confluence Keystore Location" keystorePass="Keystore Pwd" keystoreType="JKS"/>

Change the values in the code above to your own.

HTTPs Port

Alias

Confluence Keystore Location

Keystore Pwd

You can use Portecle to help find the alias.

[Gerard Johnson]

hello besides changing server.xml what other places did you make change I am having same problem

[Gerard Johnson]

 <Connector port="80" connectionTimeout="20000" redirectPort="8443"
maxThreads="48" minSpareThreads="10"
enableLookups="false" acceptCount="10" debug="0" URIEncoding="UTF-8"
protocol="org.apache.coyote.http11.Http11NioProtocol"/>



<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
maxHttpHeaderSize="8192" SSLEnabled="true"
relaxedPathChars="[]|" relaxedQueryChars="[]|{}^&#x5c;&#x60;&quot;&lt;&gt;"
maxThreads="150" minSpareThreads="25"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
sslEnabledProtocols="TLSv1.2"
clientAuth="false" useBodyEncodingForURI="true"
keyAlias="tomcat" keystoreFile="C:\users\gadmin\.keystore" keystorePass="mypass" keystoreType="JKS"/>