Bug: Activity does not show behind proxy https->http

I have Jira behind a proxy:
https -> http


It works pretty well, but there are still some bugs.
- Activity tab does not work behind proxy
- some *.js file get http instead of https (-> 404)

4 answers

1 accepted

1 votes

Hi Renato,

It sounds like you're using an Apache proxy to terminate SSL there, and then Jira just has a standard http connector.  If that is the case, then I would recommend reviewing our guide on Integrating JIRA with Apache using SSL.

It is a common oversight that after you have configured the proxy, that lots of admins forget that you have to go back to Jira's Tomcat server.xml and update this in order to tell the tomcat connector that its traffic is being redirected to it.

For example, your $JIRAINSTALL/conf/server.xml should have within the connector, the parameters such as:

scheme="https" proxyName="jira.atlassian.com" proxyPort="443"

If these don't exist in the connector, then Jira's Tomcat instance is not properly aware of the existence of this proxy that is redirecting this traffic.

Also if you have to add these parameters in, you will need to save that file, and then restart Jira in order for these changes to take effect.

I hope this helps.

Regards,
Andy

0 votes
Brian Cohen Atlassian Team Nov 21, 2017

Hi Renato,

 

It may be that you haven't fully configured Jira to run over SSL.

Have you modified your web.xml to redirect HTTP to HTTPS?

Instructions can be found towards the end of this guide:
Running JIRA applications over SSL or HTTPS

 

  1. If redirection to HTTPS will be used (this is recommended), edit the <JIRA_INSTALL>/WEB-INF/web.xml file and add the following section at the end of the file, before the closing </web-app>. In this example, all URLs except attachments are redirected from HTTP to HTTPS.

    <security-constraint>
     <web-resource-collection>
      <web-resource-name>all-except-attachments</web-resource-name>
      <url-pattern>*.jsp</url-pattern>
      <url-pattern>*.jspa</url-pattern>
      <url-pattern>/browse/*</url-pattern>
      <url-pattern>/issues/*</url-pattern>
     </web-resource-collection>
     <user-data-constraint>
      <transport-guarantee>CONFIDENTIAL</transport-guarantee>
     </user-data-constraint>
    </security-constraint>
  2. Restart JIRA after you have saved your changes.

 

If this isn't your issue we would need more information about how you've configured HTTPS in order to get a better idea of what configuration needs to be fixed.

 

Best regards,
Brian

Hi,
no jira is running on http.
There is a Apache as a proxy which accepts https and then calls jira on http:

SSLProxyEngine Off
ProxyRequests Off
ProxyPreserveHost On

<Location "/jira">
ProxyPass http://xyz.ch:8172/jira
ProxyPassReverse http://xyz.ch:8172/jira
Order allow,deny
Allow from all
</Location>

oh my...., I had a typo in the proxyName.

I am really sorry to have wasted your time. Thank a lot for the support.

kind regards

Renato

Suggest an answer

Log in or Join to answer
Community showcase
Teodora [Botron]
Published Thursday in Marketplace Apps

Jira Inferno: The Nine Circles of Jira Administration Hell

If you spend enough time as a Jira admin - whether you are managing a single, mid-sized instance, a large enterprise one or juggling multiple instances at once - you will eventually find yourself in ...

800 views 5 17
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you
Atlassian Team Tour

Join us on the Team Tour

We're bringing product updates and pro tips on teamwork to ten cities around the world.

Save your spot