Application Connections with SSL

[Stephen Reece]

Hello,

We are running JIRA 6.2.7 and FishEye 4.0.4 on a Server 2008 R2 host and Bamboo 5.9.7 on a Server 2012 R2 host. Tomcat is used as the backends. I am trying to link the applications with SSL installed. Currently, I just have a cert in JIRA, which I have exported and imported into Bamboo and FishEye's keystore and trusted certs. However, I am getting the error that: "Application 'Jira' seems to be offline. Click here to Relocate." It's very similar to this person's post:

https://answers.atlassian.com/questions/213419

They solved it by switching to an Apache reverse proxy, which I'd rather not have to deal with if possible.

I've tried to troublshoot with this:

https://confluence.atlassian.com/kb/ssl-and-application-link-troubleshooting-guide-719095282.html

Haven't been successful so far. JIRA is definitely reachable over HTTPS, but I've had to roll back to HTTP until we can get the links working. If anyone has managed to get this configuration to work and has some instructions to do this, I would appreciate the assistance. 

Thanks!

[Sander Brienen [Avisi]]

Each application link has both a display URL and an application URL. It is important that the display URL is exactly the same as the base URL of that application but you can have a different Application URL.

Example:

JIRA running on vm001.local.com:8080
Confluence running on vm002.local.com:8090

External URLS: https://jira.local.com and https://confluence.local.com

When creating an application link, use vm001.local.com:8080 as the application url and https://jira.local.com as the display URL. 

[Stephen Reece]

So if the wilcard cert is used for *.domain.com, will a cert error be thrown if https://servername is used for the URL rather than https://jira.domain.com?

[Sander Brienen [Avisi]]

I see I missed an important part in my message:

The application url should be: http://vm001.local.com:8080 in my example above. So no HTTPS and therefore no need for the application links to trust each others certificates.

[Stephen Reece]

So even if JIRA is set to redirect HTTP to HTTPS in the config, the backend application links do not need to use HTTPS? But wouldn't that also mean that traffic between the apps is in the clear?

Sorry for the delay, but I'm only able to post twice in 24 hours, which is a bit limiting.