Jira SSL via IIS Reverse Proxy

[Stevie B]

Hi all, 

We have a Jira core server (ver. 8) which is served via http at the moment: 

http://jira.company.ad.local/secure/Dashboard.jspa which is installed on a Windows server, no other applications are planned to be on this server.

We have a certificate to install, and looking at the Jira documentation, it looks a little bit tricky to install it via this route: https://confluence.atlassian.com/doc/running-confluence-over-ssl-or-https-161203.html

I've seen some posts about using IIS instead, the IIS side is ok for us, if we do that, I think I have to:

1. Update the base URL via System (in Jira) to https.

2. Stop the Jira service.

3.  Edit the /conf/server.xml like this:

<Connector port="8080" connectionTimeout="20000" redirectPort="8443" maxThreads="200" minSpareThreads="10" enableLookups="false" acceptCount="10" debug="0" URIEncoding="UTF-8" />

4. Edit the proxy in the same file to include our server name:

 <Connector acceptCount="100" connectionTimeout="20000" disableUploadTimeout="true" enableLookups="false" maxHttpHeaderSize="8192" maxSpareThreads="75" maxThreads="150" minSpareThreads="25" port="8080" protocol="HTTP/1.1" redirectPort="8443" useBodyEncodingForURI="true"
proxyName="jira.company.ad.local" proxyPort="80"/>

5. Then restart Jira services.

Am I missing any steps or have I made any glaring errors? Any help is much appreciated! Thanks, Stephen.

[Colin McDermott_GLiNTECH · Accepted solution]

Backup the server.xml file. A xml validator (google xml validator) https://www.xmlvalidation.com/ can check if the file is OK, but it is pedantic on edits. 

If it fails, restore the original file and change there. 

Make sure that 

jira.company.ad.local

resolves from the local machine. Otherwise the marketplace and gadgets won't work. 

[Stevie B]

thanks!