Application Connections with SSL

Question

Hello,

We are running JIRA 6.2.7 and FishEye 4.0.4 on a Server 2008 R2 host and Bamboo 5.9.7 on a Server 2012 R2 host. Tomcat is used as the backends. I am trying to link the applications with SSL installed. Currently, I just have a cert in JIRA, which I have exported and imported into Bamboo and FishEye's keystore and trusted certs. However, I am getting the error that: "Application 'Jira' seems to be offline. Click here to Relocate." It's very similar to this person's post:

https://answers.atlassian.com/questions/213419

They solved it by switching to an Apache reverse proxy, which I'd rather not have to deal with if possible.

I've tried to troublshoot with this:

https://confluence.atlassian.com/kb/ssl-and-application-link-troubleshooting-guide-719095282.html

Haven't been successful so far. JIRA is definitely reachable over HTTPS, but I've had to roll back to HTTP until we can get the links working. If anyone has managed to get this configuration to work and has some instructions to do this, I would appreciate the assistance.

Thanks!

Stephen Reece · Answer

So even if JIRA is set to redirect HTTP to HTTPS in the config, the backend application links do not need to use HTTPS? But wouldn't that also mean that traffic between the apps is in the clear?

Sorry for the delay, but I'm only able to post twice in 24 hours, which is a bit limiting.

Sander Brienen [Avisi] · Answer

I see I missed an important part in my message:

The application url should be: http://vm001.local.com:8080 in my example above. So no HTTPS and therefore no need for the application links to trust each others certificates.

Stephen Reece · Answer

So if the wilcard cert is used for *.domain.com, will a cert error be thrown if https://servername is used for the URL rather than https://jira.domain.com?