nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Running Confluence Over SSL (HTTPS)

Aussupport

HI All,

Follow this https://confluence.atlassian.com/display/DOC/Running+Confluence+Over+SSL+or+HTTPS

now i cannot restart the services?

Any idea?

Accepted answers

All comments

Sabine Winkler

Hi,

can you provide more details to the changes you made? Version you are using? server.xml etc. Any log file available. For example - the connector might not start because of port already in use by another process.

Thx, Sabine

Aussupport

HI,

&lt;Server port="8000" shutdown="SHUTDOWN" debug="0"&gt;
    &lt;Service name="Tomcat-Standalone"&gt;
        &lt;Connector className="org.apache.coyote.tomcat4.CoyoteConnector" port="8090" minProcessors="5" maxProcessors="75"
                   enableLookups="false" redirectPort="443" acceptCount="10" debug="0" connectionTimeout="20000"
                   useURIValidationHack="false" URIEncoding="UTF-8" keystorePass="changeit"
                   &lt;Engine name="Standalone" defaultHost="localhost" debug="0"&gt;
            &lt;Host name="localhost" debug="0" appBase="webapps" unpackWARs="true" autoDeploy="false"&gt;

                &lt;Context path="" docBase="../confluence" debug="0" reloadable="false" useHttpOnly="true"&gt;
                    &lt;!-- Logger is deprecated in Tomcat 5.5. Logging configuration for Confluence is specified in confluence/WEB-INF/classes/log4j.properties --&gt;
                    &lt;Manager pathname="" /&gt;
                &lt;/Context&gt;
            &lt;/Host&gt;

        &lt;/Engine&gt;

        &lt;!--
            To run Confluence via HTTPS:
             * Uncomment the Connector below
             * Execute:
                 %JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA (Windows)
                 $JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA  (Unix)
               with a password value of "changeit" for both the certificate and the keystore itself.
             * Restart and visit https://localhost:8443/

             For more info, see http://confluence.atlassian.com/display/DOC/Adding+SSL+for+Secure+Logins+and+Page+Security
        --&gt;

        &lt;Connector port="443" maxHttpHeaderSize="8192"
                   maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
                   enableLookups="false" disableUploadTimeout="true"
                   acceptCount="100" scheme="https" secure="true"
                   clientAuth="false" sslProtocol="TLS" SSLEnabled="true"
                   URIEncoding="UTF-8" keystorePass="changeit"/&gt;
				   keystoreFile="C:\Program Files\Atlassian\Confluence\jre\lib\security/cacerts"/&gt;
    &lt;/Service&gt;
&lt;/Server&gt;

Sabine Winkler

Hi,

ok, you are using the standard SSL port 443. Is this port free (no Apache or other process using this port). Can you start the server if you try to use 8443? Just to check if it is an port issue.

HTH, Sabine

Sabine Winkler

According to issues triggered by the certificate please check if you have one of the following exceptions in your Confluence/Tomcat Log:

http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Troubleshooting

HTH, Sabine

Aussupport

Very new to Conflunce and now i can start the service after i copy back from the backup.

so port 443 is not the issue. but when i go to the https://conflunce.mydomain.comnothing works.

also my ssl certificate is wildcard certificate *.externaldomain.com .

which log file should i looked or post?

Sabine Winkler

What do you mean by "port 443 is not the issue" - have you tried to start your service with the SSL Connector using 8443 (you have to reconfigure the HTTP Connector redirectPort too). Is this working or not?

What do you mean be "nothing works" - what is the browser telling, can you get your certificate?

@Logs: confluence\data\logs\atlassian-confluence.log --> Might be a huge file, so log if there are any exceptions or errors

HTH, Sabine

Aussupport

Hi All,

Now i have manged to start the service with https://localhost:8090but cannot access https://localhost:8443/

Yes. redirect port: 8443

&lt;Connector port="8443" maxHttpHeaderSize="8192"
                   maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
                   enableLookups="false" disableUploadTimeout="true"
                   acceptCount="100" scheme="https" secure="true"
                   clientAuth="false" sslProtocol="TLS" SSLEnabled="true"
                   URIEncoding="UTF-8" keystorePass="changeit"/&gt;
			   keystoreFile="C:\Program Files\Atlassian\Confluence\jre\lib\security/cacerts"

This keystorefile location is correct?

So we we cannot redirect to https? Any steps to troubleshoot?

As

Luciano Fagundes

What does the tomcat logs says when you start up the application? Are you getting any binding exception on port 8443?

Aussupport

HI, Create the support Request Reference: CSP-127923 but still couldn't find the solutions?

two days sending emails...

Aussupport

Where is the tomcat logs?

<confluence-install>/logs/catalina.out
<confluence-home>/logs/atlassian-confluence.out

Aussupport

Thanks all sorted

Giuliano C.

Hey Asela,

We could see that the last comment from Atlassian was related to pointing to an expert in order to configure the TMG 2010, right? Given that, can you share which solution have you searched, so if other users face the same behaviour, we can take a look at this answers post for reference?

Cheers,

Giu

Dave Browning

How did you fix?

bob sie

Running confluence over ssl or https .http://youtube.com/watch?v=1FJjdaeh-eY

Admin KavNiya

Let me know how did you fix this?

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence