Confluence Server behind Apache proxy not working with SSL?

Nick Welsh

Trying to set up Confluence behind Apache with SSL but am hitting a wall. As per this guide, I can get confluence accessable extenrally. But when following this for SSL, it won't connect. But, if I connect with <domain>:8090 I can access confluence.

Running on Windows Server 2016, firewall is allowing ports 80, 443, 8090, and 8091, and the router is port forwarding as well. My SSL certs from from Let's Encrypt using letsencrypt-win-simple

httpd-vhosts.conf:

<VirtualHost *:443>
 ServerName <domain>

 ProxyRequests Off

 <Proxy *>
 Require all granted
 </Proxy>

 ProxyPass / http://<domain>:8090
 ProxyPassReverse / http://<domain>:8090

 SSLEngine On
 SSLCertificateFile "C:/path/to/crt.pem"
 SSLCertificateKeyFile "C:/path/to/key.pem"
 SSLCertificateChainFile "C:/path/to/chain.pem"

 <Location />
 Require all granted
 </Location>

 ProxyPass /synchrony http://<domain>:8091/synchrony

 <Location /synchrony>
 Require all granted 
 RewriteEngine on
 RewriteCond %{HTTP:UPGRADE} ^WebSocket$ [NC]
 RewriteCond %{HTTP:CONNECTION} Upgrade$ [NC]
 RewriteRule .* ws://<domain>:8091%{REQUEST_URI} [P]
 </Location>
</VirtualHost>

<VirtualHost *:80>
 ServerName <domain>
 Redirect Permanent / https://<domain&gt;
 Redirect Permanent /synchrony https://<domain>/synchrony
</VirtualHost>

server.xml

<Server port="8000" shutdown="SHUTDOWN" debug="0">
 <Service name="Tomcat-Standalone">
 <Connector port="8090" connectionTimeout="20000" redirectPort="8443"
 maxThreads="48" minSpareThreads="10"
 enableLookups="false" acceptCount="10" debug="0" URIEncoding="UTF-8"
 protocol="org.apache.coyote.http11.Http11NioProtocol" 
 proxyName="<domain>" proxyPort="443" secure="true" scheme="https"/>

 <Engine name="Standalone" defaultHost="localhost" debug="0">

 <Host name="localhost" debug="0" appBase="webapps" unpackWARs="true" autoDeploy="false" startStopThreads="4">
 <Context path="" docBase="../confluence" debug="0" reloadable="false" useHttpOnly="true">
 <!-- Logger is deprecated in Tomcat 5.5. Logging configuration for Confluence is specified in confluence/WEB-INF/classes/log4j.properties -->
 <Manager pathname="" />
 <Valve className="org.apache.catalina.valves.StuckThreadDetectionValve" threshold="60" />
 </Context>

 <Context path="${confluence.context.path}/synchrony-proxy" docBase="../synchrony-proxy" debug="0" reloadable="false" useHttpOnly="true">
 <Valve className="org.apache.catalina.valves.StuckThreadDetectionValve" threshold="60" />
 </Context>
 </Host>

 </Engine>
 </Service>
</Server>

 

Thomas Deiler_db00h3

Dear @Nick Welsh,

what's the error message when you connect to https://<domain>:443?

So long

Thomas