2020-06-24 06:49:20,354 SupportHealthCheckThread-5 ERROR manav 401x58x1 x2uniq 59.177.135.86,0:0:0:0:0:0:0:1 /rest/supportHealthCheck/1.0/checkDetails [c.a.j.p.healthcheck.support.AbstractSupportHealthCheck] Unhandled error during healthcheck
2020-06-24 06:52:22,944 http-nio-8080-exec-23 WARN manav 412x316x1 x2uniq 59.177.135.86,0:0:0:0:0:0:0:1 /rest/internal/1.0/licensebanner/remindlater [c.a.p.r.c.security.jersey.XsrfResourceFilter] Additional XSRF checks failed for request: http://adopt-jira.example.com/rest/internal/1.0/licensebanner/remindlater , origin: https://adopt-jira.example.com , referrer: https://adopt-jira.example.com/plugins/servlet/applications/versions-licenses , credentials in request: true , allowed via CORS: false
Hi Manav,
Sorry to hear about this XSRF error when trying to apply a new license key in Jira Server. We have seen this kind of problem before in some other environments where Jira is configured to use a reverse proxy and these might be a problem with that configuration that is preventing this from working correctly. You can see similar threads in
One way around this would be to follow the steps in Bypass a proxy or SSL to test network connectivity for Jira server and then connect to Jira on that alternative interface/port. If you can do that, this is at least one way to apply the license.
I noticed that the error seems to indicate that the origin in using HTTPS, but the request appears to be getting made in HTTP. So that might be a factor in regards to a setting in Jira, such as the Base URL might be set incorrectly OR it could be that the site is getting accessed on an HTTP connector, but only expecting HTTPS traffic.
Perhaps if I can learn more about your environment, I can better help troubleshoot this error. Could you let me know where is SSL being terminated in your setup? (In Jira's Tomcat or in a proxy like nginx, apache, IIS, etc) If you are using a reverse proxy to redirect traffic to Jira, could you let me know which kind (nginx, apache, IIS, etc).
Regards,
Andy
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.