nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Jira over HTTPS not starting

Hyd3k

Hi I just followed a tutorial:

https://confluence.atlassian.com/adminjiraserver/running-jira-applications-over-ssl-or-https-938847764.html

Also paid special attention to "

org.apache.coyote.http11.Http11NioProtocol

" parameter I noticed there was a bug in previous versions, but no luck , when I start Jira and try to access in the browser I get nothing, unable to connect seems Jira is not starting properly, I checked common errors but none of them appear in Catalina.out

Is there anybody with the same issue that may help?

Jira version 7.6.2 x64 on CentOS 7x64 minimal updated

Server Hardware: 10 cores, 16GB RAM, 100GB HDD

Accepted answers

Hyd3k

Once I fixed the SSL chain issue, warning just disappear, it worked like a charm, thank you very much.

All comments

Gonchik Tsymzhitov_ijr6oz

Hi!

Could you provide the connector settings?

And any exceptions or errors in catalina.out?

Cheers,

Gonchik Tsymzhitov

Hyd3k

Added following text to

/opt/atlassian/jira/atlassian-jira/WEB-INF/web.xml

<security-constraint>

<web-resource-collection>

<web-resource-name>all-except-attachments</web-resource-name>

<url-pattern>*.jsp</url-pattern>

<url-pattern>*.jspa</url-pattern>

<url-pattern>/browse/*</url-pattern>

<url-pattern>/issues/*</url-pattern>

</web-resource-collection>

<user-data-constraint>

<transport-guarantee>CONFIDENTIAL</transport-guarantee>

</user-data-constraint>

</security-constraint>

Also edited server.xml

<Connector port="8080"

maxThreads="150"

minSpareThreads="25"

connectionTimeout="20000"

enableLookups="false"

maxHttpHeaderSize="8192"

protocol="HTTP/1.1"

useBodyEncodingForURI="true"

redirectPort="8443"

acceptCount="100"

disableUploadTimeout="true"

bindOnInit="false"/>

<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"

maxHttpHeaderSize="8192" SSLEnabled="true"

maxThreads="150" minSpareThreads="25"

enableLookups="false" disableUploadTimeout="true"

acceptCount="100" scheme="https" secure="true"

sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2,TLSv1.3"

clientAuth="false" sslProtocol="TLSv1,TLSv1.1,TLSv1.2,TLSv1.3" useBodyEncodingForURI="true"

keyAlias="jira" keystoreFile="/var/atlassian/application-data/jira/jira.jks" keystorePass="changeit" keystoreType="JKS"/>

Hyd3k

Well Now I tried a clean full installation but this time I first completed DB and first run with Jira then added SSL now it seems to works, but now I have a new question...

SSL certificate is considering as self signed and I did imported root and CA and also domain crt from vendor how can I update self cert and make it use vendor crt so no warning comes out?

Hyd3k

Hmm I created a new keystone new cert everything from clean seems now SSL detects a valid crt.

Hyd3k

After checking full website I noticed in troubleshooting and support tools the following alert:

Warning Supported Platforms

Warning Gadget feed URL

I updated base URL to https://domain:8443 but I still have that warning, any advise how to fix it and show it green/ok?

Gonchik Tsymzhitov

Well, Do you have reverse proxy?

Could you check chain in your certificate?

For example:

https://whatsmychaincert.com/?community.atlassian.com

Hyd3k

Once I fixed the SSL chain issue, warning just disappear, it worked like a charm, thank you very much.

Hyd3k

@Gonchik Tsymzhitov I guess your answer fixed this, thank you very much.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira