Bamboo Gadget won't show in JIRA when JIRA is behind SSL Proxy

Dirk Bromberg
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
September 21, 2012

Hi,

we have JIRA 5.1.5 and Bamboo 4.2.0.

our Bamboo is running local in network. Our JIRA works same location but behind an proxy with HTTPS/SSL! The Application-Links works fine. We see Issues in Bamboo and Builds in JIRA at tickets. And we see the Bamboo activity in Jira activity-stream!

But the 4 Bamboo Gadgets for the Dashboard would'nt work. They work fine till we add the scheme="https"proxyName="jira.xyz.com"proxyPort="443" to the Connector in Server.xml

Any ideas?

Thanks!

Dirk

4 answers

1 accepted

1 vote
Answer accepted
Dirk Bromberg
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
October 9, 2012

So, we found our prob.

Because of the mix with an SSL Hostet JIRA and non SSL Hostet Bamboo the Browser, here "chrome", deactivate the bamboo content. And every time you will view the page you have to click on a button right top at the address line and accept this...

So there was no bug or issue in Atlassian Tools... just at the user... :-)

Thanks...

0 votes
Davet September 23, 2012

Hmm...not familiar with pound but check all the likely culprits

grep pound /var/log/messages

and

keytool -v -list -keystore /opt/jdk1.6.0_26/jre/lib/security/cacerts |less

and

openssl s_client -connect your.web.site:443

0 votes
Davet September 23, 2012

They work fine till we add the scheme="https"proxyName="jira.xyz.com"proxyPort="443" to the Connector in Server.xml

You dont actually define what "wouldnt work" means but when you add those settings to server.xml you should add to your ssl.conf something like

Proxyrequests off

ProxyPreserveHost Off

ProxyPass / http://localhost:8090/

ProxyPassReverse / http://localhost:8090/

Dirk Bromberg
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
September 23, 2012

Okay, the Bamboo Gadgets are empty and won't show any content or settings.

Hm, currently we use pound as proxy not apache...

Dirk Bromberg
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
September 24, 2012

Hm,

we are trying apache httpd vs. pound...

But i don't know that this is an issue of the reverse proxy because the jira sees the bamboo without going over the proxy...

Davet September 24, 2012

With apache, when those settings are added to server.xml the apache ssl.conf needs to be reconfigured and from what I have seen of pound the same should be true.

When you do add those settings you need to check the resulting URL is correctly constructed e.g. make sure it is not http(s)://localhost or some such thing and that the name can be resolved by DNS

0 votes
LucasA
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
September 21, 2012

Hi Dirk,

Have you specified the Bamboo certificate to your JIRA java keystore according described here? Note that this is not needed if you specified your java keystore on the JIRA Tomcat -- in this case you only need to import the Bamboo certificate over there.

Best regards,
Lucas Timm

Dirk Bromberg
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
September 23, 2012

Hi Lucas,

the Bamboo is not running with SSL only the JIRA is behind the proxy with SSL.

And yes the certificate for JIRA is in the keystore for bamboo.

When this is not i get trouble with linking builds or issues in jira and / or bamboo.

Thanks

Dirk

Suggest an answer

Log in or Sign up to answer