nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

jira with http and https (letsencrypt)

FScheidig

Hi guys,

I am setting up our own JIRA software server. I also already got me a certificate by letsencrypt (in the default format ".pem" and the private key).

I followed instruction by here, to import the certificates: manual1 but get an error, because I didn't send the cert request to letsencrypt.

I also created the jks by this instructions: manual2 but get an error with finding the key in the key store.

So I have two open questions:

1. How can I create a keystore and import it to Jira?

2. How can I run jira on both ports available (http and https). I do not want a redirection, but a usable http port and a usable https port.

Thanks for your help

Accepted answers

FScheidig

I got it working:

for openssl you can use every 3rdparty tool, listed at openssl's website.

If you got your chain and priv key as pem files, you can use those steps:

"openssl.exe" pkcs12 -export -in ***-chain.pem -inkey ***-key.pem -name *yourdomain* -out *yourdomain*.pkcs12

keytool -v -importkeystore -srckeystore *yourdomain*.pkcs12 -srcstoretype pkcs12 -destkeystore ***.jks -deststoretype JKS

in the conf/server.xml

add those Lines (please replace *** with your data):

<Connector port="8443" relaxedPathChars="[]|" relaxedQueryChars="[]|{}^\`"<>"
maxThreads="150" minSpareThreads="25" connectionTimeout="20000" enableLookups="false" maxHttpHeaderSize="8192" protocol="HTTP/1.1" useBodyEncodingForURI="true"
acceptCount="100" disableUploadTimeout="true" bindOnInit="false"
SSLEnabled="true"
scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="***"
keystorePass="***" />

remove the "redirectPort="8443"" from the Connector for port 8080

All comments

PVS

Hi @FScheidig

Go to the C:\Program Files\Atlassian\JIRA\bin >>Config File you Can change the http or https Find the Attachments

config 2.PNG

Thanks ,

Venkatesh

PVS

This link is How to create a key All Are in there This is helps to you

https://confluence.atlassian.com/adminjiraserver073/running-jira-applications-over-ssl-or-https-861253906.html

FScheidig

thanks for your fast answer.

I am sorry, but how does it help me, getting http AND https enabled? (I already knew this config tool, which enables "http", "http redirect to https" or "https", but not "http and https")

With saving the configuration for JIRA, I get the error "An error occurred whie writing XML file ... java.io.FileNotFouncException: ../atlassian-jira/WEB-INF/web.xml (the requested operation cannot be performed on a file with a user-mapped section open)

why does the tool want to write to web.xml? I thought it uses server.xml...

Though those errors, after reopening the config.bat, the configuration is still there (I don't know if it wrote the config or saved it internal)

As I am running on windows, I used win-acme for getting the certificates (fullchain.pem and key.pem). With this I do not have any request certificate.

I tried importing the gotten certificates with portecle to the jks, but still get "the private key could not be found in the key store".

FScheidig

I got it working:

for openssl you can use every 3rdparty tool, listed at openssl's website.

If you got your chain and priv key as pem files, you can use those steps:

"openssl.exe" pkcs12 -export -in ***-chain.pem -inkey ***-key.pem -name *yourdomain* -out *yourdomain*.pkcs12

keytool -v -importkeystore -srckeystore *yourdomain*.pkcs12 -srcstoretype pkcs12 -destkeystore ***.jks -deststoretype JKS

in the conf/server.xml

add those Lines (please replace *** with your data):

remove the "redirectPort="8443"" from the Connector for port 8080

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

jira-administration