JIRA SSL and Apache Http

[RamakrishnanH]

Hi,

We are going to install JIRA. This will be a pure intranet application. Have the following questions.

1. Is SSL required for intranet application?
2. I think we can implement SSL in JIRA without using Apache Http Server - is that correct?
3. If i want the users to access the application using some standard url and not with https://<ip><port>, can i do that without Apache?

Thanks and Regards,

Ramki

[Nic Brough -Adaptavist-]

1. Not required, but always recommended.
2. Yes, see https://confluence.atlassian.com/jira/running-jira-over-ssl-or-https-124008.html
3. Yes, you can change the port JIRA runs on to 443 in the server.xml for Tomcat - strictly that doesn't mean you don't need the port, but systems will assume port 443 when you say https://somewhere/myjira

Oops, I forgot - on point 3, you're going to need to fiddle with permissions to enable Tomcat to listen on a port below 1024 if you're on Linux

[RamakrishnanH]

Thanks Nic. On point 3, if we use Apache Http server, then i think we can still run JIRA on port 8080 and enable SSL on Apache Http. Is that correct and recommened approach? We are on Linux.

[Nic Brough -Adaptavist-]

Yes, if you use Apache in front of JIRA, it makes things easier, and it's a recommended setup as well. Ideally, you run JIRA on 8080 without SSL, and firewall it off from the network. Then you run Apache, with SSL enabled, and a reverse proxy to the local JIRA. Apache does all the encryption work and Tomcat can get on with running JIRA for you.