I have Internal Jira and Confluence nURL's and I want to expose them externally to individual users.

Question

I have internal URLs for Jira  http://xxx.xxx.xxx.xxx:8080 and Confluence http://xxx.xxx.xxx.xxx:8090 and I want to make the URL's public. However, I do not want to make them anonymous, so I am using an ssl cert with current permissions. Is there anythin specific that I need to do to accomplish moving the URl's to public access? I have all the DNS issues resolved, I just need to know if there are any permissions that need to be changes and how to load the SSL Cert into Jira itself.

Thanks,

Mark

AnnWorley · Answer

Hi Mark,

I am not sure which sequence of events you mean as far as configuring SSL for Jira - the kb you posted is the right one, though.

Confluence doesn't have a configuration tool for SSL like config.bat (in Jira running on Windows) but if keytool is hard to use, Portecle can be a graphical alternative.

As far as whether the existing URL on port 8090 will still be accessible, it will be if you add a second connector directive to the server.xml, on port 443, and leave the existing one in place. (Also, if you configure a security constraint in web.xml as documented that will force requests to go to https and the 8090 URL will be unavailable.)

However, the base URL must either be the https one or the http one for several reasons, for example, XSRF errors and invalid URLs being built based on the base URL: Configuring the Server Base URL

Using different URLs. If you configure a different base URL or if visitors use some other URL to access Confluence, it is possible that you may encounter errors while viewing some pages.

Since this is a Production instance I recommend you spin up a test environment that is set up the same way, and test the SSL cutover there before doing it on your "live" system. Here are the docs for Confluence and Jira:

Restoring a Test Instance from Production

Establishing staging server environments for JIRA applications

Atlassian support is available to recommend SSL configurations but if you need real- time support during the cutover, please consider paying for an Atlassian Solution Partner. To find Solution Partners near you, please try the search tool: Find Solution Partners

regards,

Ann

Mark Tellier · Answer

Hi Ann,

I am moving forward. Would I have to do anything with the config.bat file?

https://confluence.atlassian.com/adminjiraserver/running-jira-applications-over-ssl-or-https-938847764.html

Also, would Jira follow the same sequence of events?

Thank you in advance for your response

Mark Tellier · Answer

Thanks Ann. It is making sense and I am having difficulty with using the Java Keytool. My question now is if I make the modifications<confluence-install-directory>/conf/server.xml  prior to the firewall cutover, will there be any affect on the internal URL's which everyone is using on a daily basis while we make it public. In other words, will this effort in making Jira public affect in any way the current production instance used on a daily basis. Also, the documentation seems to be for Confluence, would Jira follow the same instructions? Is there support available to assist us in doing this change to public?

Best Regards,

Mark