https faild; redirect to http

Sarah Kirchner

I Stash is installed on a remote server that is accessed via Apache (proxy).

Under https://example.com/stash want the server to be accessible. Calling the URL I will reflect back at http://example.com/stash/login, but there is no stash installed.

Apache:

<VirtualHost example.com:443>

  SSLEngine On
  SSLCertificateFile /etc/apache2/ssl/apache.crt
  SSLCertificateKeyFile /etc/apache2/ssl/apache.key
  ServerSignature Off

  # Atlassian Stash Configuration
  ProxyPass        /stash http://localhost:7990/stash connectiontimeout=5 timeout=300
  ProxyPassReverse /stash http://localhost:7990/stash

</VirtualHost>

Tomcat (conf/server.xml)

...
<Service name="Catalina">
...
     <Connector port="7990"
                protocol="HTTP/1.1"
                connectionTimeout="20000"
                useBodyEncodingForURI="true"
                redirectPort="443"
                compression="on"
                compressableMimeType="text/html,text/xml,text/plain,text/css,...
                secure="true"
                schema="https"
                proxyName="developer.kirchnerei.de"
                proxyPort="443"/>

...

            <Host name="localhost" appBase="webapps"
                  unpackWARs="true" autoDeploy="true"
                  xmlValidation="false" xmlNamespaceAware="false">
...
               <Context path="/stash"
                         docBase="${catalina.home}/atlassian-stash"
                         reloadable="false"
                         useHttpOnly="true"/>
...
            </Host>


...
</Service>

How to config Stash to access only over https?
Thanks

Michael Heemskerk

Hi Mulder,

Under https://example.com/stash want the server to be accessible. Calling the URL I will reflect back athttp://example.com/stash/login, but there is no stash installed.

This tells me that your Apache server is configured correctly, but Tomcat seems to think it's running on http, not https. You can confirm this by opening https://developer.kirchnerei.de/stash/login directly. If a Stash page shows up, it confirms that the Apache configuration is fine. When you actually login, Stash will redirect you to http://developer.kirchnerei.de/stash/projects which will not work (because of the http instead of https).

Your Tomcat configuration looks fine; we're using the same configuration internally for our Stash dogfooding server. Are you sure you're modifying the correct server.xml? If you're running Stash from the bundled Tomcat server, it should be the STASH_INST/conf/server.xml.

Cheers,

Michael