UrlSchemeMismatchException: Detected URL scheme, 'http', does not match expected scheme 'https'

Question

Hi

I am using Jira Server version 7.6.11 and getting below error in the log file. Appreciate if you could provide guidelines to fix it.  My Jira server is running on https and would like to know is there a way to support http too. Here is the related full error log:

2019-03-25 11:11:18,522 http-nio-8081-exec-10 ERROR piyaln 671x1960x2 r1a25m 10.52.69.4 /plugins/servlet/gadgets/dashboard-diagnostics [c.a.g.d.internal.diagnostics.DiagnosticsServlet] DIAGNOSTICS: FAILED
com.atlassian.gadgets.dashboard.internal.diagnostics.UrlSchemeMismatchException: Detected URL scheme, 'http', does not match expected scheme 'https'
at com.atlassian.gadgets.dashboard.internal.diagnostics.Diagnostics.checkExpectedScheme(Diagnostics.java:52)
at com.atlassian.gadgets.dashboard.internal.diagnostics.Diagnostics.check(Diagnostics.java:31)
at com.atlassian.gadgets.dashboard.internal.diagnostics.DiagnosticsServlet.executeDiagnostics(DiagnosticsServlet.java:82)
at com.atlassian.gadgets.dashboard.internal.diagnostics.DiagnosticsServlet.doPost(DiagnosticsServlet.java:58)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:661)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:742)
at com.atlassian.plugin.servlet.DelegatingPluginServlet.service(DelegatingPluginServlet.java:37)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:742)
at com.atlassian.plugin.servlet.ServletModuleContainerServlet.service(ServletModuleContainerServlet.java:45)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:742)
... 53 filtered
at com.atlassian.web.servlet.plugin.request.RedirectInterceptingFilter.doFilter(RedirectInterceptingFilter.java:21)
... 58 filtered
at com.atlassian.jira.security.JiraSecurityFilter.lambda$doFilter$0(JiraSecurityFilter.java:66)
... 1 filtered
at com.atlassian.jira.security.JiraSecurityFilter.doFilter(JiraSecurityFilter.java:64)
... 36 filtered
at com.atlassian.jira.servermetrics.CorrelationIdPopulatorFilter.doFilter(CorrelationIdPopulatorFilter.java:30)
... 10 filtered
at com.atlassian.web.servlet.plugin.request.RedirectInterceptingFilter.doFilter(RedirectInterceptingFilter.java:21)
... 4 filtered
at com.atlassian.web.servlet.plugin.LocationCleanerFilter.doFilter(LocationCleanerFilter.java:36)
... 26 filtered
at com.atlassian.jira.servermetrics.MetricsCollectorFilter.doFilter(MetricsCollectorFilter.java:25)
... 24 filtered
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.lang.Thread.run(Thread.java:748)

Nic Brough -Adaptavist- · Answer

See https://confluence.atlassian.com/kb/securing-your-atlassian-applications-with-apache-using-ssl-838284349.html - it is for Apache proxy servers specifically, but the stuff about the Tomcat connector applies for most proxies and load balancers.  Check the section "configure the atlassian application / update the connector configuration"

Piyal Nanayakkara · Answer

Yes, you are correct. I am using Jira over http behind a proxy that provides https.

Basically SSL Terminates in the load balancer.

So, could you please provide the details on those 3 tags?

Regards

Piyal

Nic Brough -Adaptavist- · Answer

You say "My Jira server is running on https and would like to know is there a way to support http too."

There is, but it won't work properly.  You can set up the Tomcat to have more than one "connector", running one on http and another on https.  But as you can only have one base url, Jira will not work properly if people try to use the one where the base url does not match.

Going back to the reported problem, here, I am going to guess you are using Jira over http behind a proxy that provides https?  There are three tags you need to add to the connector to make https work if you're running it this way.

Could you explain how you are doing https if my first guess is wrong?