Bug: Activity does not show behind proxy https->http

I have Jira behind a proxy:
https -> http


It works pretty well, but there are still some bugs.
- Activity tab does not work behind proxy
- some *.js file get http instead of https (-> 404)

4 answers

1 accepted

1 vote

Hi Renato,

It sounds like you're using an Apache proxy to terminate SSL there, and then Jira just has a standard http connector.  If that is the case, then I would recommend reviewing our guide on Integrating JIRA with Apache using SSL.

It is a common oversight that after you have configured the proxy, that lots of admins forget that you have to go back to Jira's Tomcat server.xml and update this in order to tell the tomcat connector that its traffic is being redirected to it.

For example, your $JIRAINSTALL/conf/server.xml should have within the connector, the parameters such as:

scheme="https" proxyName="jira.atlassian.com" proxyPort="443"

If these don't exist in the connector, then Jira's Tomcat instance is not properly aware of the existence of this proxy that is redirecting this traffic.

Also if you have to add these parameters in, you will need to save that file, and then restart Jira in order for these changes to take effect.

I hope this helps.

Regards,
Andy

0 vote
Brian Cohen Atlassian Team Nov 21, 2017

Hi Renato,

 

It may be that you haven't fully configured Jira to run over SSL.

Have you modified your web.xml to redirect HTTP to HTTPS?

Instructions can be found towards the end of this guide:
Running JIRA applications over SSL or HTTPS

 

  1. If redirection to HTTPS will be used (this is recommended), edit the <JIRA_INSTALL>/WEB-INF/web.xml file and add the following section at the end of the file, before the closing </web-app>. In this example, all URLs except attachments are redirected from HTTP to HTTPS.

    <security-constraint>
     <web-resource-collection>
      <web-resource-name>all-except-attachments</web-resource-name>
      <url-pattern>*.jsp</url-pattern>
      <url-pattern>*.jspa</url-pattern>
      <url-pattern>/browse/*</url-pattern>
      <url-pattern>/issues/*</url-pattern>
     </web-resource-collection>
     <user-data-constraint>
      <transport-guarantee>CONFIDENTIAL</transport-guarantee>
     </user-data-constraint>
    </security-constraint>
  2. Restart JIRA after you have saved your changes.

 

If this isn't your issue we would need more information about how you've configured HTTPS in order to get a better idea of what configuration needs to be fixed.

 

Best regards,
Brian

Hi,
no jira is running on http.
There is a Apache as a proxy which accepts https and then calls jira on http:

SSLProxyEngine Off
ProxyRequests Off
ProxyPreserveHost On

<Location "/jira">
ProxyPass http://xyz.ch:8172/jira
ProxyPassReverse http://xyz.ch:8172/jira
Order allow,deny
Allow from all
</Location>

oh my...., I had a typo in the proxyName.

I am really sorry to have wasted your time. Thank a lot for the support.

kind regards

Renato

Suggest an answer

Log in or Sign up to answer
Atlassian Community Anniversary

Happy Anniversary, Atlassian Community!

This community is celebrating its one-year anniversary and Atlassian co-founder Mike Cannon-Brookes has all the feels.

Read more
Community showcase
Sarah Schuster
Posted Mar 28, 2018 in Jira Software

Can a company’s culture make or break agile adoption?

Can a new-to-agile team survive and thrive in a non-agile culture? If so, what advice would you give to those trying to be agile in a non-agile culture? What's the key(s) to success? Share your thoug...

12,045 views 15 13
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you