restrict stash access to https

michael_giroux September 29, 2015

We wish to prevent http connections to Stash, and allow only https.

 

Using Stash 3.7.1

It looks like I need to:

  1. uncomment the ssl connector in server.xml
  2. update stash settings to change the url to https://...

 

Is there anything else?  

 

2 answers

1 accepted

1 vote
Answer accepted
gustavo_refosco
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
September 29, 2015

Hi Michael,

You must also comment out the HTTP connector, so only connections through HTTPS will be possible. Please check further about SSL configuration at https://confluence.atlassian.com/bitbucketserver/securing-bitbucket-server-with-tomcat-using-ssl-776640127.html - the information about commenting out the HTTP connection was taken from the 2nd step under 2. Configure HTTPS in Tomcat.

Regards,

Gustavo Refosco

0 votes
michael_giroux September 29, 2015

Thanks for the quick response.

gustavo_refosco
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
September 29, 2015

Hi Michael, You're welcome, I'm glad I was able to help. Please allow me to ask you to mark my answer as accepted in order to have it in the top of the thread, also helping other customers. Thanks in advance. Gustavo Refosco

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events