Hi,
We upgraded this week from 6.4 to 8.2.1 and then enabled SSL. For some reason some of the home page gadgets dont work now.
We also setup nginx to proxy in the front. JIRA and NGINX have SSL and config is as follows.
NGINX
server {
listen 80 default_server;
listen [::]:80 default_server;
server_name _;
return 301 https://track.example.com;
}
server {
server_name track.example.com;
listen 443 ssl http2;
ssl on;
ssl_protocols TLSv1.2;
ssl_certificate /etc/httpd/ssl/example.com/STAR_blah_com.crt;
ssl_certificate_key /etc/httpd/ssl/example.com/example.com.key;
access_log /var/log/nginx/nginx.access.log;
error_log /var/log/nginx/nginx.error.log;
charset utf-8;
location / {
proxy_pass https://track.example.com:8443;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
proxy_redirect off;
# If you want to accept attachments larger than 10mb, update the following line
proxy_connect_timeout 30s;
client_max_body_size 50M;
}
}
JIRA server.xml
<Connector port="8443" maxThreads="150" minSpareThreads="25" connectionTimeout="20000" enableLookups="false" maxHttpHeaderSize="8192" protocol="HTTP/1.1" useBodyEncodingForURI="true" redirectPort="8443"
SSLCertificateFile="/etc/httpd/ssl/example.com/STAR_example_com.crt" SSLEnabled="true"
SSLCertificateKeyFile="/etc/httpd/ssl/example.com/blah.com.key"
SSLCACertificateFile="/etc/httpd/ssl/example.com/STAR_example_com.ca-bundle"
acceptCount="100" disableUploadTimeout="true" relaxedPathChars="[]|" relaxedQueryChars="[]|{}^\`"<>" scheme="https" secure="true"
proxyName="track.example.com" clientAuth="optional" SSLProtocol="TLSv1.2" proxyPort="443" />
