Redirect Jira to HTTPS

Question

Hello everyone. I would like redirect http://atlassian-test:8080/ to https://atlassian-test/ but redirect doesn't work. I've set up Apache for https. Both links are working. I've tried defferent redirectPort in server.xml (8443 and 443). Where is my error? Please, assist! I have SLES 12 SP1, Apache 2.4, Jira Software 7.4.3. Part of config file /opt/atlassian/jira/conf/server.xml config file /etc/apache2/vhosts.d/proxy-host.conf ServerAdmin admin@example.ru ServerName atlassian-test DocumentRoot /srv/www/ ErrorLog /var/log/apache2/proxy-host.log CustomLog /var/log/apache2/proxy-host_access.log combined ProxyRequests off ProxyPreserveHost On Require all granted ProxyPass / http://atlassian-test:8080/ ProxyPassReverse / http://atlassian-test:8080/ SSLEngine on SSLProxyEngine On SSLCertificateFile /etc/apache2/ssl/ca.crt SSLCertificateKeyFile /etc/apache2/ssl/ca.key HostnameLookups Off UseCanonicalName Off ServerSignature On ScriptAlias /cgi-bin/ "/srv/www/vhosts/dummy-host.example.com/cgi-bin/" AllowOverride None Options +ExecCGI -Includes Require all granted Order allow,deny Allow from all ServerName atlassian-test Redirect / https://atlassian-test/

Nic Brough -Adaptavist- · Answer

Mmm, ok. I was suggesting to replace just the last line, but here's my full definition (using atlassian-test). I imagine it will work for post 8080, and I suspect the missing bit on your side is simply the ServerName, from the descriptive comment below it. ServerName atlassian-test # the server uses to identify itself. This is used when creating # specifies what hostname must appear in the request's Host: header to # match this virtual host. For the default virtual host (this file) this # value is not decisive as it is used as a last resort host regardless. # However, you must set it for any further virtual host explicitly. ServerAdmin webmaster@localhost DocumentRoot /var/www/html # Available loglevels: trace8, ..., trace1, debug, info, notice, warn, # error, crit, alert, emerg. # It is also possible to configure the loglevel for particular # modules, e.g. #LogLevel info ssl:warn ErrorLog ${APACHE_LOG_DIR}/error.log CustomLog ${APACHE_LOG_DIR}/access.log combined # For most configuration files from conf-available/, which are # enabled or disabled at a global level, it is possible to # include a line for only one particular virtual host. For example the # following line enables the CGI configuration for this host only # after it has been globally disabled with "a2disconf". #Include conf-available/serve-cgi-bin.conf RewriteEngine on RewriteCond %{SERVER_NAME} =atlassian-test RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]

Dmitry_l3v800 · Answer

Thank you for your answer! @Nic Brough -Adaptavist-, I put your code in the config file /etc/apache2/vhosts.d/proxy-host.conf like this: RewriteEngine on RewriteCond %{SERVER_NAME} =atlassian-test RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent] , restart apache and redirect doesn't work :-( @Andy Heinzer, I have three applications installed on the one server: Jira, Confluence and Bitbucket. Apache is installed on the same server. Server's DNS-name resolved to local area IP-address (and with domain suffix as well). Atlassian server have to be accesible only inside our company. So I would like to set up SSL on three application with redirect: http://atlassian-test: 8080 to https://atlassian-test/ or https://atlassian-test/jira and http://atlassian-test:8090 to https://atlassian-test/confluence/ and http://atlassian-test:7990 to https://atlassian-test/bitbucket/ Or something like that. Of course, I've made SSL according to Integrating Jira with Apache using SSL document.

Andy Heinzer · Answer

Nic is on the right path there.

You need Jira's Tomcat instance to be hosted on some port.  It doesn't have to be 8080, but it does have to be some unique and unused port number.  If you're using a reverse proxy like Apache in front of Jira, then those steps will work to redirect requests made at

http://atlassian-test.example.com

But this won't redirect requests made at just hostname:8080 port of your Jira machine.  You actually don't want those specific ones redirected because that web traffic still needs some way to get from your proxy to Jira.  Your proxy still needs to communicate with the Tomcat instance that Jira is using.   Right now your Jira is configured to serve up it's site on port 8080.

But the use of the reverse proxy can take requests made to  http://atlassian-test.example.com (http://atlassian-test.example.com:8080) and in turn alter them to use the HTTPS protocol instead.

What DNS value does 'atlassian-test' resolve to?  The IP of your Jira instance?  Or the IP of your server running Apache?

If it's Apache, then I'd recommend following this guide: Integrating Jira with Apache using SSL document.

If it's the Jira instance, then you're probably going to want to push users to connect to the fully qualified domain name that directs this content first to the Apache server.   From that point you can then follow this guide to have Apache redirect/rewrite these requests.