nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How do I configure JIRA Service Management to use SSL?

Scott Barr_4zoqwn

I am struggling with finding the proper way to configure SSL for a JIRA Service Management Data Center implementation.

I did find a guide on how to do this for the JIRA product itself, but it does not appear to be applicable because it needs additional JAVA setup on the server. The JIRA Service Management installation bundle for Windows is supposed to come pre-configured with it's own JAVA, so should not be needed.

Can anyone help point me in the right direction to get started?

Accepted answers

Dirk Ronsmans

Hey @Scott Barr ,

Could you share the guide you found, I'd like to see how it suggests you set it up.

There are several ways of doing this

in the tomcat configuration
using a reverse proxy
..;

The official suggestion you can find here

https://confluence.atlassian.com/adminjiraserver/running-jira-applications-over-ssl-or-https-938847764.html

Scott Barr_4zoqwn

I was able to get the Java key store built, and certificates added from my CA. Instead of continuing with the config\server.xml manual changes, I installed a new version of Java Runtime Environment and ran the "config.bat" tool that was mentioned a little further up in this same guide. I adjusted the entries as it said, doing HTTPS only, set the port to 8443, and directed to the keystore. All tested successfully.

After a reboot however, I am now getting an error on the webpage startup at https://xxx:8443 that "The Server.xml file is missing parameters needed by JIRA to handle requests that contain special characters."

Investigating, but if anyone knows anything real quick, please chime in

Thank you,

All comments

Dirk Ronsmans

Hey @Scott Barr ,

Could you share the guide you found, I'd like to see how it suggests you set it up.

There are several ways of doing this

in the tomcat configuration
using a reverse proxy
..;

The official suggestion you can find here

https://confluence.atlassian.com/adminjiraserver/running-jira-applications-over-ssl-or-https-938847764.html

Scott Barr_4zoqwn

Good morning, Sorry I did not respond yesterday. I had apparently done something wrong and the forums would not let me post

This is the guide that is confusing me. I used the Windows installer that is supposed to come prepackaged with a JRE that is to be used, however none seem to be present. None of the steps in the guide function for me, as I cannot launch java apps, nor can I seem to set the JAVA HOME information.

Despite what the documentation says(in multiple places i see note of using the built in JRE that comes with the pre-packaged solution), should I just go ahead and install Oracle JRE 11 or some such to do this?

Appreciate any assistance, I am very new to web type development and configuring SSL.

Edit : To be more clear, I am using the x64 Windows installer for JIRA Service Management only. Nothing else has been installed except Postgres SQL 11.

Thank you!

Scott Barr_4zoqwn

I am thinking more clearly today, and I've identified the JAVA_HOME(JRE_HOME?) location to be

E:\Atlassian\Jira\jre\bin\

keytool is located here so I am no longer stuck. Working on the document you sent. Thank you

Scott Barr_4zoqwn

Investigating, but if anyone knows anything real quick, please chime in

Thank you,

Dirk Ronsmans

Hey @Scott Barr ,

you need to make sure your tomcat connectors have the part for the special characters.

this thread seems to explain it pretty well.

https://community.atlassian.com/t5/Jira-Software-questions/Tomcat-misconfigured-due-to-requests-for-special-characters-2018/qaq-p/968102

Dirk Ronsmans

And the official docs about it

https://confluence.atlassian.com/jirakb/jira-server-startup-fails-with-tomcat-misconfigured-error-958453799.html

Scott Barr_4zoqwn

So I was just looking at that, and those lines are in both the HTTP and HTTPS connectors already. Seems to now be there by default. Very weird. Still investigating.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

server

ssl

jira-service-management

jira-service-management-server