JIRA and Confluence over SSL using same FQDN and same cert from CA but different ports

Question

I purchased a cert from a CA and am trying to set up both Confluence and JIRA instances on the same machine to be accessible in this manner: Confluence: https://[secure.myFQDN]:9443 JIRA: https://[secure.myFQDN]:8443 The FQDN is the same for both instances, but the port numbers are different, so this should work. I have followed the documentation for both Confluence and JIRA to get them running over SSL using a cert from a CA. I created the .keystore file and copied it to mykeystore.jks, and Confluence is accessible. (Yes, I edited the conf/server.xml with the keystore path to mykeystore.jks, the SSl port for Confluence, and keystore password.) I then made a copy of mykeystore.jks and placed it into mykeystore.jks and edited the /conf/server.xml to have the keystore path of mykeystore.jks, the SSL port for JIRA, and the keystore password. However when I try to access JIRA, it doesn't load. I can only get JIRA to load using a self-signed cert. I'm not very familiar with keystore files, but shouldn't it be possible to use the same SSL cert on the same machine? I mean, I'm using two different instances and two different ports (9443 and 8443) for each instance. Any advice to help in what I'm trying to do (both JIRA and Confluence on same machine assessible via same FQDN but using different ports) would be appreciated.

Justin Galimore · Answer

Thank you for this!!

CPDev · Answer

For others who may encounter the same issue: I determined the issue was the "Key Alias" parameter setting in JIRA's in server.xml. (Confluence does not have a Key Alias parameter in it's server.xml, so it went unnoticed.) Once I updated JIRA's server.xml key alias parameter to the key alias I used when going through the keystore methods, JIRA started working. ========= Also note that when using JIRA and Confluence from the same FQDN/domain name, you will inadvertently log yourself out of one application anytime you interact with another application, as long as you are using the same browser and in a non-incognito mode. Reason: cookies. Cookies do not specify the port number, so one cookie from one application tied to the FQDN will overwrite the cookie from the other application (also tied to the FQDN). There are two ways to solve this problem: 1. Edit context path (I opted to NOT do this one), or 2. Edit either JIRA or Confluence to use a different cookie name. (I chose to edit JIRA). Steps are here: https://confluence.atlassian.com/display/CONFKB/Logging+into+Another+Atlassian+Application+Logs+Me+Out+of+Confluence Basically: 1. Change the session cookie name by adding the following line to your JAVA_OPTS parameter (found here: /bin/setenv.sh): -Dorg.apache.catalina.SESSION_COOKIE_NAME=JIRASESSIONID and (if you are using Tomcat v7, which you probably are) 2. add the following code in /conf/context.xml by setting the value for sessionCookieName