Unable to migrate jira service desk to https

Samir Haram January 19, 2022

We have a running instance of Jira service desk and confluence on the standard ports 8080 and 8000 respectively. 

Now our cybersecurity team is forcing us to move the JIRA application from HTTP to HTTPS (SSL).

We have Certificate files Issued by GeoTrust RSA CA 2018 and tried to follow below

https://confluence.atlassian.com/adminjiraserver/running-jira-applications-over-ssl-or-https-938847764.html

and 

https://confluence.atlassian.com/kb/how-to-import-an-existing-ssl-certificate-for-use-in-tomcat-838412853.html

 

Kindly help us. 

 

 

2 answers

1 accepted

2 votes
Answer accepted
Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
January 20, 2022

You have not explained where you are stuck.

Before we go any further, I'd like to take a step back and confirm that you are trying to do this in the most suitable way for your systems.

The doc you have pointed to is about making Tomcat handle all the SSL, which is quite complex and imposes load on the Tomcat servers that are running your Jira and Confluence.  Are you sure you want to do that?  Most people running Atlassian services offload SSL onto a web proxy, which is easier to set up, more flexible, and takes the load off the Tomcat.

If you are sure the Tomcat route is the right one, you're going to need to explain where you are stuck and what you are doing differently to what the doc is saying.

Samir Haram January 31, 2022

Dear Nic Brough _Adaptavist_,

 

I've installed the JIRA application on HTTP IP using the windows installer and started using it after starting the Atlassian JIRA windows service. 

Please suggest me easy way to migrate JIRA over SSL. 

Samir Haram January 31, 2022

Hi @Nic Brough -Adaptavist- ,

 

May i get your remote support so i can conclude this ticket?

Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
January 31, 2022

How are you planning to do the SSL?  In the Tomcat?  A proxy?  Something else?

Samir Haram January 31, 2022

In tomcat

Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
February 1, 2022

Ok, so where are you stuck in the doc you referred to in your question?

Samir Haram February 1, 2022

The tutorial is about creating a new certificate and importing a CA reply.

 

The challenge is, we have already certificate files along with the private key as below

I have
1. bundle chain.crt
2. private. key
3. Keystore/keypair file
4. Intermediate Certicate.crt
5. Root Certificate. crt
6. *_mydomain_com.crt

I am able to create and import existing files by referring above shared link but getting a private key mismatch issue in JIRA Configuration Tool during check certificate in keystore

 

We look forward your support

Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
February 2, 2022

If you're geting a private key mismatch, then either you have not applied the key and certificate correctly, or they do not match for some reason.  You will probably have to ask the people who gave them to you.

1 vote
Pramodh M
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
January 20, 2022

Hi @Samir Haram 

For Having HTTPS method you need to choose how you want the SSL should be managed, please confirm from the methods defined here, and I will be able to assist with that

https://confluence.atlassian.com/adminjiraserver/running-jira-applications-over-ssl-or-https-938847764.html

https://confluence.atlassian.com/doc/running-confluence-over-ssl-or-https-161203.html

Thanks,
Pramodh

Samir Haram January 31, 2022

Dear @Pramodh M 

 

I've installed the JIRA application on HTTP IP using the windows installer and started using it after starting the Atlassian JIRA windows service. 

Please suggest me easy way to migrate JIRA over SSL. 

Let's continue with https://confluence.atlassian.com/adminjiraserver/running-jira-applications-over-ssl-or-https-938847764.html

Samir Haram January 31, 2022

May I get remote support?

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
SERVER
TAGS
AUG Leaders

Atlassian Community Events