not able to activate SSL on my bitbucket server

Question

Im not able to activate SSL on my bitbucket server.

1. I have generated a certificate using Letsencrypt

2. I run the following command :

/opt/atlassian/bitbucket/7.0.1/jre/bin/keytool -import -alias tomcat -file /etc/letsencrypt/live/bitbucket.worldevci.com-0002/fullchain.pem -keystore /var/atlassian/application-data/bitbucket/shared/config/ssl-keystore

3. I have edited the file 'bitbucket.properties' and added the following

server.port=8443
server.ssl.enabled=true
server.ssl.key-store=/var/atlassian/application-data/bitbucket/shared/config/ssl-keystore
server.ssl.key-store-password=Project0
server.ssl.key-password=Project0

4. after that nothing works: Im not able to connect to the sites:

http://bitbucket.worldevci.com:7990

neither

https://bitbucket.worldevci.com:8443

patricetano · Answer

hi edwin, thanks for feedback

I followed the instructions but still not working. below is the output of logs :

2020-03-28 11:55:31,899 INFO [SpringContextShutdownHook] c.a.b.i.boot.log.BuildInfoLogger Bitbucket 7.0.1 has shut down
2020-03-28 11:55:34,070 INFO [SpringContextShutdownHook] c.a.b.i.s.i.e.DefaultIndexEventQueueProcessor Worker thread has been shut down
2020-03-28 11:55:34,089 INFO [SpringContextShutdownHook] c.a.b.internal.ssh.server.SshServer Stopping SSH server...
2020-03-28 11:55:34,119 INFO [SpringContextShutdownHook] c.a.b.internal.ssh.server.SshServer Stopped SSH server successfully.
2020-03-28 11:55:36,648 INFO [SpringContextShutdownHook] c.a.s.internal.home.HomeLockAcquirer Releasing lock on /var/atlassian/application-data/bitbucket/shared
2020-03-28 11:55:36,665 INFO [SpringContextShutdownHook] c.a.s.internal.home.HomeLockAcquirer Releasing lock on /var/atlassian/application-data/bitbucket
2020-03-28 11:55:46,328 INFO [main] o.s.boot.SpringApplication
. ____ _ __ _ _
/\ / ___'_ __ _ _(_)_ __ __ _ \ \ \ \
( ( )\___ | '_ | '_| | '_ / _` | \ \ \ \
\/ ___)| |_)| | | | | || (_| | ) ) ) )
' |____| .__|_| |_|_| |_\__, | / / / /
=========|_|==============|___/=/_/_/_/
:: Spring Boot :: (v2.2.4.RELEASE)

2020-03-28 11:55:46,811 INFO [main] c.a.b.i.b.BitbucketServerApplication Starting BitbucketServerApplication on bitbucket.worldevci.com with PID 12815 (/opt/atlassian/bitbucket/7.0.1/app/WEB-INF/classes started by atlbitbucket in /)
2020-03-28 11:55:46,812 INFO [main] c.a.b.i.b.BitbucketServerApplication The following profiles are active: nio
2020-03-28 11:55:48,974 INFO [main] c.a.b.i.boot.log.BuildInfoLogger Starting Bitbucket 7.0.1 (b94b0c2 built on Mon Mar 09 00:19:49 UTC 2020)
2020-03-28 11:55:48,975 INFO [main] c.a.b.i.boot.log.BuildInfoLogger JVM: AdoptOpenJDK OpenJDK 64-Bit Server VM 1.8.0_242-b08
2020-03-28 11:55:53,913 WARN [main] o.a.c.loader.WebappClassLoaderBase The web application [ROOT] appears to have started a thread named [oracle.jdbc.driver.BlockSource.ThreadedCachingBlockSource.BlockReleaser] but has failed to stop it. This is very likely to create a memory leak. Stack trace of thread:
2020-03-28 11:55:53,913 WARN [main] o.a.c.loader.WebappClassLoaderBase The web application [ROOT] appears to have started a thread named [InterruptTimer] but has failed to stop it. This is very likely to create a memory leak. Stack trace of thread:
2020-03-28 11:55:53,937 ERROR [main] o.s.boot.SpringApplication Application run failed
org.springframework.boot.web.server.WebServerException: Unable to start embedded Tomcat server
at org.springframework.boot.web.embedded.tomcat.TomcatWebServer.start(TomcatWebServer.java:215)
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.startWebServer(ServletWebServerApplicationContext.java:297)
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.finishRefresh(ServletWebServerApplicationContext.java:163)
at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:553)
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.refresh(ServletWebServerApplicationContext.java:141)
at org.springframework.boot.SpringApplication.refresh(SpringApplication.java:747)
at org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:397)
at org.springframework.boot.SpringApplication.run(SpringApplication.java:315)
at com.atlassian.bitbucket.internal.boot.BitbucketServerApplication.start(BitbucketServerApplication.java:270)
at com.atlassian.bitbucket.internal.boot.BitbucketServerApplication.main(BitbucketServerApplication.java:87)
at org.springframework.boot.loader.MainMethodRunner.run(MainMethodRunner.java:48)
at org.springframework.boot.loader.Launcher.launch(Launcher.java:87)
at com.atlassian.bitbucket.internal.launcher.BitbucketServerLauncher.start(BitbucketServerLauncher.java:151)
at com.atlassian.bitbucket.internal.launcher.BitbucketServerLauncher.main(BitbucketServerLauncher.java:99)
... 4 frames trimmed
Caused by: java.lang.IllegalArgumentException: standardService.connector.startFailed
at org.apache.catalina.core.StandardService.addConnector(StandardService.java:231)
at org.springframework.boot.web.embedded.tomcat.TomcatWebServer.addPreviouslyRemovedConnectors(TomcatWebServer.java:278)
at org.springframework.boot.web.embedded.tomcat.TomcatWebServer.start(TomcatWebServer.java:197)
... 14 common frames omitted
Caused by: org.apache.catalina.LifecycleException: Protocol handler start failed
at org.apache.catalina.connector.Connector.startInternal(Connector.java:1008)
... 16 common frames omitted
Caused by: java.lang.IllegalArgumentException: jsse.alias_no_key_entry
at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:99)
... 16 common frames omitted
Caused by: java.io.IOException: jsse.alias_no_key_entry
at org.apache.tomcat.util.net.SSLUtilBase.getKeyManagers(SSLUtilBase.java:328)
... 16 common frames omitted
2020-03-28 11:55:53,966 INFO [main] c.a.b.i.boot.log.BuildInfoLogger Bitbucket 7.0.1 has shut down

Edwin Kyalangalilwa · Answer

Hi @patricetano ,

Full steps with possible errors and configurations can be found here

Securing Bitbucket Server with Tomcat using SSL

Also, check whether the application is actually running and for errors in the logs

Bitbucket Server debug logging

Default log file is:

<Bitbucket home directory>/log/atlassian-bitbucket.log