Enabling Jira for HTTPS with self signed certificate

Roger Spraggon
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
April 28, 2020

I followed the instructions in https://confluence.atlassian.com/adminjiraserver085/running-jira-applications-over-ssl-or-https-981155619.html (for self signed certificate) however when I try to access Jira after enabling either "HTTP and HTTPS" or "HTTPS only" I get "https://xxxxxxx.domain.local:8443/secure/errors.jsp" and "Jira access problem" with a blank screen. I'm also still getting a certificate error, not sure if this should go away if changes have been done correctly or if there is something that I've missed 

I have tried to modify the home URL page to match the https and port 8443 before restarting the Atlassian service but this doesn't make any difference.

I've looked at the log files and I'm not seeing anything that stands out though I'm not 100% sure which log file to look at and what to look for. 

1 answer

0 votes
Gonchik Tsymzhitov
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
April 28, 2020

Hi! 

I'd recommend you try to make call using

curl -vvv https://xxxxxxx.domain.local:8443

As a result you can see what exactly broken in certificate.

Roger Spraggon
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
April 28, 2020

This is the result from curl:

 

curl -vvv https://xxxxx.domain.local:8443
* Trying ::1:8443...
* Connected to xxxxx.domain.local (::1) port 8443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: C:\Users\Public\Downloads\curl-7.69.1-win64-mingw\bin\curl-ca-bundle.crt
CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: self signed certificate
* Closing connection 0
curl: (60) SSL certificate problem: self signed certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Suggest an answer

Log in or Sign up to answer