Jira HTTPS doesn't work externally

[Jared Landress]

I've had an internally working jira 7.2.x for a while now. I'm now looking at making it work externally and also making it work via https.

Here is where I am stuck at ...

http://localname:8080 - Works fine

http://localip:8080 - Works fine

https://localname:8443 - Works fine

https://localip:8443 - Works fine

http://jira.domain.com:8080 - Works fine

http://externalip:8080 - Works fine

https://jira.domain.com:8443 - Fails

https://externalip:8443 - Fails

So my external domain is setup properly, as I can access it on 8080, but I can't access it on 8443. I can however access it on 8443 internally. That would lead me to think it's a firewall setting, but my firewall logs show the traffic is being accepted and passed with no errors. I have also uninstalled Symantec (just in case), and I have confirmed the Windows firewall was disabled.

Now the other odd thing. If I set the config on Jira to be HTTP redirect to HTTPS and I go to http://localname:8080 it auto redirects to https://localname:8443, however if I go to http://jira.domain.com:8080, that page just loads without redirecting.

Any ideas on what I missed?

[Gonchik Tsymzhitov]

Hi! 

Let's double check the server.xml config. 

Also, you can check it using this doc

https://confluence.atlassian.com/adminjiraserver071/running-jira-applications-over-ssl-or-https-802593051.html

Cheers,

Gonchik Tsymzhitov

[Jared Landress]

The connectors look fine to me. Nothing about them talks about the domains to respond on.

<Connector
acceptCount="100"
connectionTimeout="20000"
disableUploadTimeout="true"
enableLookups="false"
maxHttpHeaderSize="8192"
maxSpareThreads="75"
maxThreads="150"
minSpareThreads="25"
port="8080"
protocol="HTTP/1.1"
redirectPort="8443"
useBodyEncodingForURI="true"
/>

<Connector
SSLEnabled="true"
acceptCount="100"
clientAuth="false"
connectionTimeout="20000"
disableUploadTimeout="true"
enableLookups="false"
keyAlias="jira"
keystoreFile="D:\JIRA\Jira\jre\jira.jks"
keystorePass="changeit"
keystoreType="JKS"
maxHttpHeaderSize="8192"
maxSpareThreads="75"
maxThreads="150"
minSpareThreads="25"
port="8443"
protocol="org.apache.coyote.http11.Http11Protocol"
scheme="https"
secure="true"
sslProtocol="TLS"
useBodyEncodingForURI="true"
/>

[Jared Landress]

I just tested https only. When enabling that, it's very odd. For my local ip, 8443 is the only one that works. For my external ip 8080 is the only one that works. Why does the external allow 8080 non-secure, if jira is set to https only?

[JP _AC Bielefeld Leader_]

Are you testing on the same PC/server where Jira is running or are you using another PC for the tests?

JP