Gadgets don't display correctly when using SSL and NGINX proxy server. And gadget.common.error.500

[Ion ordsupport01]

Hi all

We are currently using JIRA Service Desk version 3.15.3 / Jira Core 7.12.3, and we have a gadget display error (the "Gadgets do not display correctly" screen shot)

After upgrading to version JIRA Service Desk 4.2.1/Jira Core 8.2.1 (in a test environment), this problem remained and another one appeared - gadget.common.error.500 (the "gadget.common.error.500" screen shot)

Our setup

OS – CentOS Linux release 7.6.1810 (Core)

JIRA Service Desk sever.xml - screen shot "JIRA Service Desk sever.xml"

Base URL - screen shot "Base URL"

Setup of NGINX server

OS - CentOS Linux release 7.3.1611 (Core)

NGINX conf - screen shot "NGINX conf"

NGINX SSL conf - screen shot "NGINX SSL conf"

tried java: built in JIRA, Oracle JAVA 1.8, opengdk in centos - no result

How do i fix this?

[Alexis Robert · Accepted solution]

Hi @Ion ordsupport01 , 

I'd say that this is because you're using self signed certificates (as your DNS is jirasd.local), so Java doesn't trust your CA. You should try adding your CA/root certificates to the truststore. This article explains a lot of possibles causes for 500 errors like the one you describe, and the self-signed certificate is listed as one possible cause.

I'd suggest using a certificate that is issued by a trusted source to fix your problem.

Let me know if you have any questions, 

--Alexis

[Ion ordsupport01]

Hi Alexis Robert

Thanks for the answer. I cited the DNS jirasd.local as an example. About the certificate - it is possible that it is self-signed (the certificate was provided by the global team of our company), but in any browser the site is defined as protected.
Thanks for the article, I tried to solve the problem in the manner described in it, but I did not succeed. Can you suggest the article / instructions on how to add a certificate to trusted for java.

Thanks.

[Alexis Robert]

Hi @Ion ordsupport01 ,

you can find instructions on how to add the CA certificates in Java here.

Let me know if this helps, 

--Alexis

[Ion ordsupport01]

Alexis,
thank you
I will try and report the result

[Ion ordsupport01]

Alexis,

I added a root certificate in the java key storage. Thank you very much. I also found more detailed instructions for adding a certificate. click

Thanks again))))