Switch from HTTP to HTTPS

[Jonathan]

Hi Experts,

I have a JIRA server-core instance that is running internally with HTTP.  We want to move away from unsecure URL's to using a wildcard SSL cert of ours. 

For example: 
before: http://jira.home.com:8080
after:  https://jira.home.com

What is the simplest way of doing this?  I am currently trying to change server.xml to make this work but i must be doing something wrong because whenever I try updating things here Jira refuses to startup.  I have a *.home.com wildcard SSL cert in pfx, crt, and .key formats using OpenSSL.

[DPK J]

@JonathanWelcome to the community!

It is a great move. Using HTTP in today's age is not a great choice for an organization. Coming to the problem in hand,

• The best way to do this is by using reverse proxy server,
  • You install reverse proxy server (like Nginx or Apache HTTPD)
  • And proxy setting that redirect all incoming request to Jira.
• This way you don't have to change anything in your Jira configuration, (this is also very helpful when you upgrade Jira)
• Also, you can block access on port 8080 from outside world, and just allow people to connect of 443 (default https port) and also redirect port 80 to 443.
• Using reverse proxy will also ensure that you don't have to add certificates to every application in organization, and you can store it at single place

Here are some references,

• Using reverse proxy with Jira - https://confluence.atlassian.com/adminjiraserver073/integrating-jira-with-apache-using-ssl-861253896.html
• https://confluence.atlassian.com/jirakb/configure-jira-server-to-run-behind-a-nginx-reverse-proxy-426115340.html