Configure JIRA DC on single node without SSL on application level + F5 load balancer with SSL cert

[Alexandra Mihaela Apostol]

Hello,

I am trying to configure JIRA JSM 10.3.12 DC on single node (on a server) to run without the SSL certificate installed on the application level. we want to have the F5 load balancer 

I'm just trying to avoid installing an SSL certificate directly on the Jira server that was installed in the http://jira-dev.com:8081 and I want through the F5 that the certificate is installed to be access through https://jira-dev.com 

The F5 load balancer is listening on port 443, and it shows the Availability: Offline (Enabled) The children pool member(s) are down.
 
What am I doing wrong?
In the server.xml file I have these connector ports:

<Connector port="8080" relaxedPathChars="[]|" relaxedQueryChars="[]|{}^&#x5c;&#x60;&quot;&lt;&gt;"
maxThreads="200"
minSpareThreads="25"
connectionTimeout="60000"
enableLookups="false"
maxHttpHeaderSize="8192"
protocol="org.apache.coyote.http11.Http11NioProtocol"
useBodyEncodingForURI="true"
redirectPort="8443"
acceptCount="100"
disableUploadTimeout="true"
scheme="https"
proxyName="jira-dev.com"
proxyPort="443"
secure="true"/>


<Connector port="8081" connectionTimeout="20000" maxThreads="200" minSpareThreads="10"
enableLookups="false" acceptCount="10" URIEncoding="UTF-8"
relaxedPathChars="[]|" relaxedQueryChars="[]|{}^&#x5c;&#x60;&quot;&lt;&gt;"/>

<Connector port="8009" relaxedPathChars="[]|" relaxedQueryChars="[]|{}^&#x5c;&#x60;&quot;&lt;&gt;" maxThreads="200" redirectPort="8443" packetSize="32768" enableLookups="false" protocol="org.apache.coyote.ajp.AjpNioProtocol" URIEncoding="UTF-8" secretRequired="false"/>
<Engine name="Catalina" defaultHost="localhost">
<Host name="localhost" appBase="webapps" unpackWARs="true" autoDeploy="true">


Also, on the Apache httpd server, I do not have a /etc/https/conf.d/ssl.conf file but I have only a /etc/https/conf/virtual_hosts.conf file.

The port 443 is open, but when I do a 
netstat -tulnp | grep 443 

nothing shows up...

How can I make this work?

Thank you in advance!

BR,
Alexandra

[Philipp Sendek _catworkx_]

Hi @Alexandra Mihaela Apostol ,

So basically, once you start fresh and use the default server.xml, there's a connector for "HTTPS - Proxying Jira via Apache or Nginx over HTTPS" with some instructions and a link to the documentation on how to setup Jira with Apache or Nginx over HTTPS: https://confluence.atlassian.com/x/PTT3MQ
You can of course disregard all Apache/Nginx related info on that page, but you should follow the instructions on how to configure Jira for this setup:

All that's necessary for Jira is to enable the connector below the comment and make sure all other connectors are commented out (e.g. have a <!-- before and a --> after the start and end tag) in your server.xml.

(Re)starting Jira with this configuration should expose it to port 8080 with HTTPs. Then you go ahead and configure your F5 to connect to Jira under the server-IP/DNS and port 8080.

What's confusing me is that you talk about jira-dev.com both for the application server and for the F5. The DNS can only redirect to one of those systems, so maybe the problem lies there?
Also you mention port 443 on your server, but if you don't use an Apache for HTTPS on the server, this port doesn't matter for you.

Maybe I'm missing something here, so please feel free to provide more explanations. Otherwise I hope this helps you solve your case.

Greetings
Philipp