nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Broken SSL

Shannon Harvey

Hello All,

First and foremost please forgive my lack of knowledge and verbiage regarding this product. I was given a task without any prior working knowledge of Atlassian products and have run into a stumbling block and thought that I'd post here with hopes that I can get some assistance.

I have been asked to setup SSL for all of our Atlassian products using a reverse proxy which I've done using apache and a self signed certificate. On the surface everything appears to be working as expected however several components of the application appear to be broken when attempting to navigate the app.

To be more specific if I access servicedesk and try to create a new issue i get met with the following error message and am unable to proceed "The Jira server could not be contacted. This may be a temporary glitch or the server may be down" Additonally none of the avatars appear to be functioning as expected.

Has anyone here experienced anything like this and if so can you assist. The product is running on RedHat.

Accepted answers

Dirk Ronsmans

@Shannon Harvey ,

In the server.xml file which connectors do you have enabled?

If you have both the direct one and the SSL one enabled these can cause interference with eachother.

Normally there is a comment above the connector telling you which one to enable. (for you that would be HTTPS using a reverse proxy)

All comments

Alexis Robert

Hi @Shannon Harvey ,

in addition to configuring Apache to handle SSL connections, you also need to change Jira configuration, as explained in this documentation : https://confluence.atlassian.com/kb/securing-your-atlassian-applications-with-apache-using-ssl-838284349.html

You will at least need to change the Base URL to https, and the server.xml to provide Tomcat with the SSL settings.

Let me know if this helps,

--Alexis

Shannon Harvey

Thank you, can you point me to a specific part of the documentation i should be focusing on as I think I've already done all of this. Also we disabled the Base URL so i dont think that's required.

Dirk Ronsmans

@Shannon Harvey ,

In the server.xml file which connectors do you have enabled?

If you have both the direct one and the SSL one enabled these can cause interference with eachother.

Normally there is a comment above the connector telling you which one to enable. (for you that would be HTTPS using a reverse proxy)

Shannon Harvey

Hi @Dirk Ronsmans

here is my server.xml file. can you tell me if something is getting in the way?

<?xml version="1.0" encoding="UTF-8"?>

-<Server shutdown="SHUTDOWN" port="8005">

-<Service name="Catalina">

<Connector port="8080" bindOnInit="false" disableUploadTimeout="true" acceptCount="100" redirectPort="8443" useBodyEncodingForURI="true" protocol="HTTP/1.1" maxHttpHeaderSize="8192" enableLookups="false" connectionTimeout="20000" minSpareThreads="25" maxThreads="150" relaxedQueryChars="[]|{}^\`"<>" relaxedPathChars="[]|" proxyPort="443" proxyName="wfddevsd01.goodrich.root.local" scheme="https" secure="true"/>
-->

-<Engine name="Catalina" defaultHost="localhost">

-<Host name="localhost" autoDeploy="true" unpackWARs="true" appBase="webapps">

-<Context useHttpOnly="true" reloadable="false" docBase="${catalina.home}/atlassian-jira" path="">

</Context>

</Host>

</Engine>

</Service>

</Server>

Shannon Harvey

Hi Dirk.

I have the HTTPS - Proxying Jira via Apache or Nginx over HTTPS connector enabled. I dont see any others enabled

Alexis Robert

You can have a look here to get more details about the server.xml configuration : https://confluence.atlassian.com/adminjiraserver073/integrating-jira-with-apache-using-ssl-861253896.html#IntegratingJIRAwithApacheusingSSL-Step1:ConfigureTomcat

I'm not sure what you're saying about disabling the Base URL : this is a parameter that is needed to get Jira working.

Dirk Ronsmans

And I assume you also modified the connector to suit your domainname/ports?

You also only mention the customer portal, so I guess the rest (agent side) is ok?

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

server

jira-service-desk

jira-service-desk-server