Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
Deleted user
0 / 0 points
Next:
badges earned

Your Points Tracker
Challenges
Leaderboard
  • Global
  • Feed

Badge for your thoughts?

You're enrolled in our new beta rewards program. Join our group to get the inside scoop and share your feedback.

Join group
Recognition
Give the gift of kudos
You have 0 kudos available to give
Who do you want to recognize?
Why do you want to recognize them?
Kudos
Great job appreciating your peers!
Check back soon to give more kudos.

Past Kudos Given
No kudos given
You haven't given any kudos yet. Share the love above and you'll see it here.

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Crowd and SSL

Hi We have Jira, Confluence, Bamboo and Crucible all setup in an SSL configuration so each site is https://sitename, etc. Each of these have user directories in crowd that is connected to applications that have an directory connected to our windows active directory. The connection to crowd in each application uses http://crowd.onlifehealth.com (Non SSL). We are wanting to implement SSL for our crowd connections as well.

The assumption is the site would now be https://crowd.onlifehealth.com.

I am curious what the best way of doing this is.

We attempted to set up the crowd site in apache (was already setup to reverse proxy to the tomcat app on our server http://corp-jiraweb:8095).

So we made the changes to our apache vhosts section as shown at the bottom highlighted.

We did nothing to the server.xml file in crowd

We changed the crowd.properties to reflect the new URL https.

We added the certs to the java keystores that each app uses.

Also all of our apps run on dedicated IP addresses and we have these setup in the vhost section to reverse proxy to the actual port on the server.

NameVirtualHost 10.243.2.193:80


<VirtualHost 10.243.2.193:80>
ServerName jira.onlifehealth.com
Redirect / https://jira.onlifehealth.com/


</VirtualHost>


<VirtualHost 10.243.3.9:80>
ServerName crucible.onlifehealth.com
Redirect / https://crucible.onlifehealth.com/


</VirtualHost>


<VirtualHost 10.243.3.8:80>
ServerName bamboo.onlifehealth.com
Redirect / https://bamboo.onlifehealth.com/


</VirtualHost>


<VirtualHost 10.243.3.10:80>
ServerName confluence.onlifehealth.com
Redirect / https://confluence.onlifehealth.com/


</VirtualHost>


NameVirtualHost 10.243.3.11:80


<VirtualHost 10.243.3.11:80>
ServerName crowd.onlifehealth.com
Redirect / https://crowd.onlifehealth.com/


</VirtualHost>



NameVirtualHost 10.243.3.11:443
<VirtualHost 10.243.3.11:443>
ServerName crowd.onlifehealth.com

ProxyRequests Off
ProxyPreserveHost On
<Proxy *>
Order deny,allow
Allow from all
</Proxy>

SSLEngine On
SSLCertificateFile "C:/Program Files (x86)/Apache Software Foundation/Apache2.2/conf/ssl/crowd.cert"
SSLCertificateKeyFile "C:/Program Files (x86)/Apache Software Foundation/Apache2.2/conf/ssl/crowd.key"

ProxyPass / http://corp-jiraweb:8095/

ProxyPassReverse / http://corp-jiraweb:8095/



<Location />
Order allow,deny
Allow from all
</Location>
</VirtualHost>

NameVirtualHost 10.243.3.10:443

<VirtualHost 10.243.3.10:443>
ServerName confluence.onlifehealth.com
ProxyRequests Off
ProxyPreserveHost On
<Proxy *>

Order deny,allow
Allow from all
</Proxy>
SSLEngine On
SSLCertificateFile "C:/Program Files (x86)/Apache Software Foundation/Apache2.2/conf/ssl/confluence.cert"
SSLCertificateKeyFile "C:/Program Files (x86)/Apache Software Foundation/Apache2.2/conf/ssl/confluence.key"

ProxyPass / ajp://corp-jiraweb:8019/


ProxyPassReverse / ajp://corp-jiraweb:8019/


<Location />
Order allow,deny
Allow from all
</Location>



</VirtualHost>

NameVirtualHost 10.243.2.193:443

<VirtualHost 10.243.2.193:443>
ServerName jira.onlifehealth.com

ProxyRequests Off
ProxyPreserveHost On
<Proxy *>
Order deny,allow
Allow from all
</Proxy>

SSLEngine On
SSLCertificateFile "C:/Program Files (x86)/Apache Software Foundation/Apache2.2/conf/ssl/jira.cert"
SSLCertificateKeyFile "C:/Program Files (x86)/Apache Software Foundation/Apache2.2/conf/ssl/jira.key"

ProxyPass / ajp://corp-jiraweb:8009/
ProxyPassReverse / ajp://corp-jiraweb:8009


<Location />

Order allow,deny
Allow from all

</Location>
</VirtualHost>

NameVirtualHost 10.243.3.9:443

<VirtualHost 10.243.3.9:443>
ServerName crucible.onlifehealth.com

ProxyRequests Off
ProxyPreserveHost On
<Proxy *>
Order deny,allow
Allow from all
</Proxy>

SSLEngine On
SSLCertificateFile "C:/Program Files (x86)/Apache Software Foundation/Apache2.2/conf/ssl/crucible.cert"
SSLCertificateKeyFile "C:/Program Files (x86)/Apache Software Foundation/Apache2.2/conf/ssl/crucible.key"

ProxyPass / http://corp-jiraweb:8060/
ProxyPassReverse / http://corp-jiraweb:8060/


<Location />
Order allow,deny
Allow from all
</Location>
</VirtualHost>




NameVirtualHost 10.243.3.8:443
<VirtualHost 10.243.3.8:443>
ServerName bamboo.onlifehealth.com

ProxyRequests Off
ProxyPreserveHost On
<Proxy *>
Order deny,allow
Allow from all
</Proxy>

SSLEngine On
SSLCertificateFile "C:/Program Files (x86)/Apache Software Foundation/Apache2.2/conf/ssl/bamboo.cert"
SSLCertificateKeyFile "C:/Program Files (x86)/Apache Software Foundation/Apache2.2/conf/ssl/bamboo.key"


ProxyPass / http://corp-jiraweb:8084/
ProxyPassReverse / http://corp-jiraweb:8084/


<Location />
Order allow,deny
Allow from all
</Location>
</VirtualHost>







Are we doing this the right way?

Any suggestions?

1 answer

Hi Lance

The settings related to Apache seems to be OK. However, I would suggest to review the HTTP context from Crowd side and enable the tags proxyName= and proxyPort=.

For further details, please use the following link as your guideline:

https://confluence.atlassian.com/display/JIRA/Integrating+JIRA+with+Apache+using+SSL#IntegratingJIRAwithApacheusingSSL-Note:AlternativeconfigurationifHTTPSisterminatedontheproxyserver

Cheers,

Paulo Renato

Suggest an answer

Log in or Sign up to answer
TAGS
Community showcase
Asked in Jira Service Management

JSM June ask me anything (AMA)

Hello Community members! We’re wrapping up the end of JSM June with an Ask Me Anything (AMA) with the Jira Service Management product team. This is your chance to ask all your ITSM questions to o...

239 views 12 14
View question

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you