restrict stash access to https

[michael_giroux]

We wish to prevent http connections to Stash, and allow only https.

Using Stash 3.7.1

It looks like I need to:

1. uncomment the ssl connector in server.xml
2. update stash settings to change the url to https://...

Is there anything else?  

[Gustavo Refosco · Accepted solution]

Hi Michael,

You must also comment out the HTTP connector, so only connections through HTTPS will be possible. Please check further about SSL configuration at https://confluence.atlassian.com/bitbucketserver/securing-bitbucket-server-with-tomcat-using-ssl-776640127.html - the information about commenting out the HTTP connection was taken from the 2nd step under 2. Configure HTTPS in Tomcat.

Regards,

Gustavo Refosco

[michael_giroux]

Thanks for the quick response.

[Gustavo Refosco]

Hi Michael, You're welcome, I'm glad I was able to help. Please allow me to ask you to mark my answer as accepted in order to have it in the top of the thread, also helping other customers. Thanks in advance. Gustavo Refosco