Running JIRA over SSL behind Apache

Kapil Bolli
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
April 23, 2012

HI Guys,
Need a urgent Help with apache, am lost with this from last 4 days and am mot able to figure out what mistake i have made
Scenario :- we have Jira server running on TOMCAT, and now what we want to do is to integrate it with apache over SSL, have configured apache & tomcat using proxy, & also itś geting diverted to apache Over SSL but dashboard is not getting displayed properly
attaching here with the Screen shot, Config file and error log, guys please help me out where i am going wrong .

(server.txt) (ssl-error.log)

3 answers

1 vote
Arne Schirmacher April 23, 2012

It seems that your <Connector> entry in conf/server.xml entry is broken.

Here is what works for me:

- use the default server.xml file and uncomment the second <Connector> entry (the one with AJP)

- in your httpd.conf and httpd-ssl.conf, add

ProxyPass        /           ajp://localhost:8009/
ProxyPassReverse /           ajp://localhost:8009/

This will probably also work with the http protocol instead ajp, to do that, use http://... instead of ajp:// and the 8080 port number.



Kapil Bolli
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
April 24, 2012

Hi Dennis this is mine .conf file of apache

1 vote
Dennis Kromhout van der Meer
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
April 23, 2012

Which guide are you following? Also, the problem of the stylesheets not showing up might have to do with a wrongly configured base url, be sure that this is set to the new https address. Can you also provide your apache configuration file? Thanks!

Kapil Bolli
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
April 24, 2012

This is the .conf file in Apache

LoadModule ssl_module modules/mod_ssl.so

Listen 443

<virtualhost *:443>

# ServerAdmin root@millenniumit.com

ServerName jiraup1-80.millenniumit.com

ErrorLog /var/log/httpd/ssl-error.log

LogLevel warn

CustomLog /var/log/httpd/ssl-access.log combined

ServerSignature On

SSLEngine On

SSLCertificateFile /etc/httpd/ssl.crt/millenniumit.com.crt

SSLCertificateKeyFile /etc/httpd/ssl.key/millenniumit.com.key

SSLCertificateChainFile /etc/httpd/ssl.crt/ca.crt

SSLProxyEngine on

<proxy *>

Allow from all

</proxy>

ProxyRequests Off

ProxyPreserveHost On

ProxyPass / http://localhost:8080/jirasup1-80

ProxyPassReverse / http://localhost:8080/jirasup1-80</em<>>

</virtualhost>

0 votes
Arne Schirmacher April 24, 2012

try

ProxyPass         /jirasup1-80   http://localhost:8080/jirasup1-80  

ProxyPassReverse  /jirasup1-80   http://localhost:8080/jirasup1-80

Kapil Bolli
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
April 25, 2012

if i use

ProxyPass /jirasup1-80 http://localhost:8080/jirasup1-80
ProxyPassReverse /jirasup1-80 http://localhost:8080/jirasup1-80
then i get the error 404

The requested URL /secure/Dashboard.jspa was not found on this server.


<address>Apache/2.2.15 (CentOS) Server at jirasup1-80.millenniumit.com Port 443</address>
Arne Schirmacher April 25, 2012

Both left and right path / url must be the same and must match the path from your base url in JIRA and also the path attribute from your server.xml which is not the case.

Just try the ajp configuration a try, it should work right away.

Suggest an answer

Log in or Sign up to answer