Hi Adrian,
I have a similar setup like you except that Jira is running on a dedicated server. Confluence & Apache HTTPD 2.4.x on the other machine. SSL terminating at the Apache HTTPD. Are you using the proxy-http module or are you going with mod_ajp?
You must use the Base URL configured in the Confluence / Jira general admin page to get this running.
I would delete all application links between the two servers & do a restart afterwards, to get a clean start.
Do you setup the application link by starting with Jira or Confluence? The setup process will always bring you to the other server by calling the entered (Base) url of the other server.
Are both servers using the same user base?
You might want to crosscheck some settings with my working config related to the port & ssl settings (Please adapt the path, server & other individual settings):
ssl.conf / vhost.conf depending on your config:
<VirtualHost IP_OF-YOUR_SERVER:443>
# Protocols h2 http/1.1
DocumentRoot "YOUR DOC ROOT"
ServerName yourserver.yourdomain.org
ServerAdmin admin@.yourdomain.org
ErrorLog /var/log/apache/ssl_error.log
TransferLog /var/log/apache/ssl_access.log
LogLevel warn
SSLEngine On
SSLHonorCipherOrder On
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK
SSLCertificateFile /etc/apache2/conf/ssl/yourserver.yourdomain.org.crt
SSLCertificateKeyFile /etc/apache2/conf/ssl/yourserver.yourdomain.org.key
# Depends on your certificate
SSLCACertificateFile /etc/apache2/conf/ssl/wildcard.intermediate.crt
Header set Strict-Transport-Security "max-age=16070400; includeSubDomains"
<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
BrowserMatch "MSIE [1-5]" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
BrowserMatch "MSIE [6-9]" ssl-unclean-shutdown
RewriteEngine On
#LogLevel notice rewrite:trace8
RewriteCond %{REQUEST_URI} !^/confluence [NC]
RewriteCond %{REQUEST_URI} !^/confluence/.* [NC]
RewriteCond %{REQUEST_URI} !^/synchrony [NC]
RewriteCond %{REQUEST_URI} !^/synchrony/.* [NC]
RewriteCond %{REQUEST_URI} !^/jira [NC]
RewriteCond %{REQUEST_URI} !^/jira/.* [NC]
RewriteRule ^(.*)$ https://yourserver.yourdomain.org/confluence [R=301,L]
# Atlassian Proxy Configuration:
ProxyRequests Off
ProxyPreserveHost On
#SSLProxyEngine Off
<Proxy *>
Require all granted
</Proxy>
ProxyPass /synchrony http://yourserver.yourdomain.org:8091/synchrony
<Location /synchrony>
Require all granted
RewriteEngine on
RewriteCond %{HTTP:UPGRADE} ^WebSocket$ [NC]
RewriteCond %{HTTP:CONNECTION} Upgrade$ [NC]
RewriteRule .* ws://yourserver.yourdomain.org:8091%{REQUEST_URI} [P]
</Location>
RemoteIPHeader X-Forwarded-For
</VirtualHost>
mod_jk.conf:
# Worker config
JkWorkersFile conf/workers.properties
# Logging
JkLogFile /var/log/apache/mod_jk.log
JkLogLevel warn
JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
# JkOptions indicates to send SSL KEY SIZE
JkOptions +ForwardKeySize +ForwardURICompatUnparsed -ForwardDirectories +RejectUnsafeURI
JkEnvVar httpd YOURSERVER
# Mount on all vhost and ssl
JkMountCopy All
# node0
# redirect tomcat errors to apache httpd
JkMount /confluence confluence;use_server_errors=500
JkMount /confluence/* confluence;use_server_errors=500
JkMount /jira jira;use_server_errors=500
JkMount /jira/* jira;use_server_errors=500
# Modul (Admin)
JkMount /jk-manage/* jk-manage
JkMount /jk-manage jk-manage
# Enable the JK manager access from localhost/net only
<Location /jk-manage >
JkMount jk-manage
Require ip 192.168
Require ip 127
</Location>
workers.properties:
# Global Settings
worker.maintain=30
# Default Settings
worker.basic.type=ajp13
worker.basic.socket_keepalive=true
worker.basic.ping_mode=A
worker.basic.ping_timeout=10000
worker.basic.connection_pool_size=250
worker.basic.connection_pool_timeout=120
worker.basic.recovery_options=7
worker.basic.lbfactor=1
worker.basic.max_packet_size=65536
worker.list=confluence
worker.confluence.host=YOUR_SERVER_IP
# Confluence AJP PORT
worker.confluence.port=8009
worker.confluence.socket_timeout=300
worker.confluence.socket_connect_timeout=300000
worker.confluence.reference=worker.basic
worker.list=jira
worker.jira.host=YOUR_SERVER_IP
# Jira AJP PORT
worker.jira.port=8010
worker.jira.socket_timeout=300
worker.jira.socket_connect_timeout=300000
worker.jira.reference=worker.basic
# JK Manage Application
worker.list=jk-manage
worker.jk-manage.type=status
Confluence server.xml
<Server port="8000" shutdown="SHUTDOWN">
<Service name="Tomcat-Standalone">
<!-- You can use this one for testing direct access to Confluence without SSL -->
<Connector protocol="org.apache.coyote.http11.Http11NioProtocol" port="8080"
address="YOURSERVERIP"
enableLookups="false"
redirectPort="8443"
acceptCount="10"
minSpareThreads="10"
maxThreads="150"
connectionTimeout="20000"
URIEncoding="UTF-8"
disableUploadTimeout="true"
proxyName="yourserver.yourdomain.org"
proxyPort="443"
scheme="https"/>
<!-- This is the Tomcat AJP Port -->
<Connector port="8009"
minSpareThreads="10"
maxThreads="250"
connectionTimeout="120000"
address="YOURSERVERIP"
protocol="AJP/1.3"
redirectPort="8444"
enableLookups="false"
URIEncoding="UTF-8"
maxPostSize="-1"
packetSize="65536"/>
<Engine name="Standalone" defaultHost="yourserver.yourdomain.org" jvmRoute="node0">
<Host name="yourserver.yourdomain.org" appBase="webapps" unpackWARs="true" autoDeploy="false" startStopThreads="4">
<Context path="/confluence" docBase="../confluence" reloadable="false" useHttpOnly="true">
<Manager pathname="" />
</Context>
<Context path="${confluence.context.path}/synchrony-proxy" docBase="../synchrony-proxy" debug="0" reloadable="false" useHttpOnly="true">
</Context>
</Host>
</Engine>
</Service>
</Server>
Jira server.xml
<Server port="8005" shutdown="SHUTDOWN_SBJIRASRV1">
<Listener className="org.apache.catalina.startup.VersionLoggerListener"/>
<Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on"/>
<Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener"/>
<Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener"/>
<Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener"/>
<Listener className="org.apache.catalina.mbeans.JmxRemoteLifecycleListener"
rmiRegistryPortPlatform="16969" rmiServerPortPlatform="6969" />
<Service name="Catalina">
<!-- You can use this one for testing direct access to Jira without SSL -->
<Connector port="8082"
maxThreads="150"
minSpareThreads="25"
connectionTimeout="20000"
enableLookups="false"
maxHttpHeaderSize="8192"
protocol="HTTP/1.1"
useBodyEncodingForURI="true"
redirectPort="8443"
acceptCount="100"
disableUploadTimeout="true"
bindOnInit="false"/>
<Connector port="8010"
minSpareThreads="10"
maxThreads="200"
address="YOURSERVERIP"
protocol="AJP/1.3"
redirectPort="8444"
enableLookups="false"
URIEncoding="UTF-8"
maxPostSize="-1"
packetSize="65536"/>
<Engine name="Catalina" defaultHost="yourserver.yourdomain.org" jvmRoute="jira">
<Host name="yourserver.yourdomain.org" appBase="webapps" unpackWARs="true" autoDeploy="true">
<Context path="/jira" docBase="${catalina.home}/atlassian-jira" reloadable="false" useHttpOnly="true">
<Resource name="UserTransaction" auth="Container" type="javax.transaction.UserTransaction"
factory="org.objectweb.jotm.UserTransactionFactory" jotm.timeout="60"/>
<Manager pathname=""/>
<JarScanner scanManifest="false"/>
</Context>
</Host>
<Valve className="org.apache.catalina.valves.AccessLogValve"
pattern="%a %{jira.request.id}r %{jira.request.username}r %t "%m %U%q %H" %s %b %D "%{Referer}i" "%{User-Agent}i" "%{jira.request.assession.id}r""/>
</Engine>
</Service>
</Server>
Confluence Base URL:
https://yourserver.yourdomain.org/confluence
Jira Base URL:
https://yourserver.yourdomain.org/jira
Hope this helps or leads you in the right direction...
Best
JP
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.