nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Jira over HTTPS Help!

Server Team_y5975d

Hi, ive tried this kb article https://confluence.atlassian.com/jirakb/how-to-run-jira-over-https-with-a-personal-information-exchange-pfx-certificate-432804342.html

I tried the example in that article and replaced the variables with our own. When i try to start the atlassian services, it fails

We are trying to simply change the Url to Jira.conveyhs.com and bind an IP and certificate

I can upload what my server.xml file looks like so you can see how ive set it up.

What am i doing wrong?

Accepted answers

All comments

Michael Wolfe_r4ge1i

You will need to make sure you import the proper Root, Intermediate, and server certificates into the Jira Keystore located in %installationPath%/jre/lib/security/cacerts. You will also want to run %jiraInstallation%/bin/config.bat and configure your HTTPS port. I had some issues changing the port on my server so I left them as default, and use an Apache rewrite so users don't have to type in port numbers.

Server Team_y5975d

BTW this is a Windows Server 2012 R2 PC

I was told by atlassian support that the above server.xml connector is all I need for a .pfx cert

do I really have to mess with the jira keystore if I am running windows, and windows has its own key store?

Server Team_y5975d

So what I really need done is, I need to bindings. One External, and one Internal

I have an IP for both. Basically I know how to do it in IIS but not Apache Tomcat

Michael Wolfe_r4ge1i

Which External and Internal bindings are you referring to? Also, if you are running IIS on this server, make sure you aren't conflicting with Apache Tomcat by binding the same IP address with an SSL certificate in IIS that you are trying to use in Apache Tomcat.

If you cannot get your current configuration working, then you may want to try using the Java Keystore method. Here is another community question that lists all the steps needed to import a PFX cert into the keystore:

https://community.atlassian.com/t5/Jira-questions/Installing-SSL-in-JIRA/qaq-p/356787

Once the certificate has been added to the Keystore, change your server.xml to point to the Keystore, and supply the keystore password. Your server.xml should look similar to this:

Server Team_y5975d

Here is my conncector

As you can see I specified the PKCS12 store and it is working fine.

I was just wondering how you specify that you want it to listen on a specific IP address. Like in IIS Bindings example below:

Jira PLEASE!.png

Michael Wolfe_r4ge1i

According to this KB https://confluence.atlassian.com/jirakb/how-to-run-jira-on-a-specific-ip-321847552.html you just add it to your connector string.

This is how your connector will look:

Obviously, change 127.0.0.1 to the IP address you wish Jira to use, then restart the Jira service.