JIRA with NGINX SSL and Azure SSO

[RYung]

Hi everyone, 

I am working on integration of JIRA/Confluence and Azure SSO, we setup the NGINX to route HTTP (Jira/Confluence, which means we don't enable the https connector in corresponding tomcat file) -> HTTPS using self-signed certificate. 

However, there are 2 errors which I think should be related to Java SSL certificate issue. 

1. it shows gadget.common.error.500 in activity stream on Jira homepage, and from the atlassian-jira.log:

[c.a.t.j.healthcheck.support.GadgetFeedUrlHealthCheck] An error occurred when performing the Gadget feed URL healthcheck
javax.net.ssl.SSLPeerUnverifiedException: Certificate for <our domain name> doesn't match any of the subject alternative names: []

2. Azure SSO fails only on Jira and from the atlassian-jira.log:

“INVALID_SIGNATURE Invalid response. Invalid certificate recieved in response. Please contact your Azure AD admin.”

Apart from the above, everything works pretty fine. Confluence is working properly with Azure SSO. Could anyone from community help me on that? Many thanks.