Bug: Activity does not show behind proxy https->http

I have Jira behind a proxy:
https -> http


It works pretty well, but there are still some bugs.
- Activity tab does not work behind proxy
- some *.js file get http instead of https (-> 404)

4 answers

1 accepted

1 vote

Hi Renato,

It sounds like you're using an Apache proxy to terminate SSL there, and then Jira just has a standard http connector.  If that is the case, then I would recommend reviewing our guide on Integrating JIRA with Apache using SSL.

It is a common oversight that after you have configured the proxy, that lots of admins forget that you have to go back to Jira's Tomcat server.xml and update this in order to tell the tomcat connector that its traffic is being redirected to it.

For example, your $JIRAINSTALL/conf/server.xml should have within the connector, the parameters such as:

scheme="https" proxyName="jira.atlassian.com" proxyPort="443"

If these don't exist in the connector, then Jira's Tomcat instance is not properly aware of the existence of this proxy that is redirecting this traffic.

Also if you have to add these parameters in, you will need to save that file, and then restart Jira in order for these changes to take effect.

I hope this helps.

Regards,
Andy

0 vote
Brian Cohen Atlassian Team Nov 21, 2017

Hi Renato,

 

It may be that you haven't fully configured Jira to run over SSL.

Have you modified your web.xml to redirect HTTP to HTTPS?

Instructions can be found towards the end of this guide:
Running JIRA applications over SSL or HTTPS

 

  1. If redirection to HTTPS will be used (this is recommended), edit the <JIRA_INSTALL>/WEB-INF/web.xml file and add the following section at the end of the file, before the closing </web-app>. In this example, all URLs except attachments are redirected from HTTP to HTTPS.

    <security-constraint>
     <web-resource-collection>
      <web-resource-name>all-except-attachments</web-resource-name>
      <url-pattern>*.jsp</url-pattern>
      <url-pattern>*.jspa</url-pattern>
      <url-pattern>/browse/*</url-pattern>
      <url-pattern>/issues/*</url-pattern>
     </web-resource-collection>
     <user-data-constraint>
      <transport-guarantee>CONFIDENTIAL</transport-guarantee>
     </user-data-constraint>
    </security-constraint>
  2. Restart JIRA after you have saved your changes.

 

If this isn't your issue we would need more information about how you've configured HTTPS in order to get a better idea of what configuration needs to be fixed.

 

Best regards,
Brian

Hi,
no jira is running on http.
There is a Apache as a proxy which accepts https and then calls jira on http:

SSLProxyEngine Off
ProxyRequests Off
ProxyPreserveHost On

<Location "/jira">
ProxyPass http://xyz.ch:8172/jira
ProxyPassReverse http://xyz.ch:8172/jira
Order allow,deny
Allow from all
</Location>

oh my...., I had a typo in the proxyName.

I am really sorry to have wasted your time. Thank a lot for the support.

kind regards

Renato

Suggest an answer

Log in or Sign up to answer
How to earn badges on the Atlassian Community

How to earn badges on the Atlassian Community

Badges are a great way to show off community activity, whether you’re a newbie or a Champion.

Learn more
Community showcase
Published May 21, 2018 in Jira Software

How large do you think Jira Software can grow?

Hi Atlassian Community! My name is Shana, and I’m on the Jira Software team. One of the many reasons this Community exists is to connect you to others on similar product journeys or with comparabl...

1,232 views 10 18
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you