JIRA SSL and Apache Http

Question

Hi, We are going to install JIRA. This will be a pure intranet application. Have the following questions. * Is SSL required for intranet application? * I think we can implement SSL in JIRA without using Apache Http Server - is that correct? * If i want the users to access the application using some standard url and not with https://, can i do that without Apache? Thanks and Regards, Ramki

Nic Brough -Adaptavist- · Answer

Yes, if you use Apache in front of JIRA, it makes things easier, and it's a recommended setup as well.  Ideally, you run JIRA on 8080 without SSL, and firewall it off from the network.  Then you run Apache, with SSL enabled, and a reverse proxy to the local JIRA.  Apache does all the encryption work and Tomcat can get on with running JIRA for you.

RamakrishnanH · Answer

Thanks Nic. On point 3, if we use Apache Http server, then i think we can still run JIRA on port 8080 and enable SSL on Apache Http. Is that correct and recommened approach? We are on Linux.

Nic Brough -Adaptavist- · Answer

* Not required, but always recommended.
* Yes, see https://confluence.atlassian.com/jira/running-jira-over-ssl-or-https-124008.html
* Yes, you can change the port JIRA runs on to 443 in the server.xml for Tomcat - strictly that doesn't mean you don't need the port, but systems will assume port 443 when you say https://somewhere/myjira

Oops, I forgot - on point 3, you're going to need to fiddle with permissions to enable Tomcat to listen on a port below 1024 if you're on Linux