SSL Configuration

Kamil B April 12, 2024

HI. I made steps 1-13 from this tutorial: https://confluence.atlassian.com/adminjiraserver/running-jira-applications-over-ssl-or-https-938847764.html#RunningJiraapplicationsoverSSLorHTTPS-jiraconfigtool .

I wanted to make this ssl because i want to configure a SSO from Win Ser AD FS. This serivce require https prefix. After i added a keystore to Jira software this error occurs:

"Setup: Tomcat is misconfigured
The server.xml file is missing parameters needed by Jira to handle requests that contain special characters."

Please help.

Best regards,

Kamil

 

1 answer

0 votes
Marc Koppelaar - Devoteam
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
April 12, 2024

Hi @Kamil B 

Welcome to the community.

Did you update your server XML as described in step 2 of the documentation, according to the error it seems you did't.

 

Kamil B April 12, 2024

No, to be honest didn't know that i have to update. I thought i have to make a keystore and add it by  Jira configuration tool. I will try to update this file and comeback.

Kamil B April 12, 2024

image.png

Should i paste:

<Connector relaxedPathChars="[]|" 
relaxedQueryChars="[]|{}^&#x5c;&#x60;&quot;&lt;&gt;" port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
              maxHttpHeaderSize="8192" SSLEnabled="true"
              maxThreads="150" minSpareThreads="25"
              enableLookups="false" disableUploadTimeout="true"
              acceptCount="100" scheme="https" secure="true"
              sslEnabledProtocols="TLSv1.2,TLSv1.3"
              clientAuth="false" useBodyEncodingForURI="true"
              keyAlias="jira" keystoreFile="<Jira_HOME>/jira.jks" keystorePass="changeit" keystoreType="JKS"/>

these values here and uncomment it? @Marc Koppelaar - Devoteam 

Kamil B April 16, 2024

I changed these commented values, tried to restart service and i doesn't start at all, i also added 

<Connector relaxedPathChars="[]|" 
relaxedQueryChars="[]|{}^&#x5c;&#x60;&quot;&lt;&gt;" acceptCount="100" connectionTimeout="20000" disableUploadTimeout="true" enableLookups="false" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" port="8080" protocol="HTTP/1.1" redirectPort="<PORT_FROM_STEP_1>" useBodyEncodingForURI="true"/>

these values. Windows shows error 1067 when tries to start. @Marc Koppelaar - Devoteam 

Kamil B April 16, 2024

I changed config, service now starts but still shows error.

Marc Koppelaar - Devoteam
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
April 16, 2024

Hi @Kamil B 

What is the error that's being presented.

Kamil B April 16, 2024

image.png

Hi @Marc Koppelaar - Devoteam ,Same error like before, I can provide server.xml file to take look into it because I don't know what I'm doing wrong.

Marc Koppelaar - Devoteam
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
April 16, 2024

HI @Kamil B 

So your server.xml is missing parameters, you need to find out what is missing.

Retrace the doc's and check. 

Check the log files from tomcat and catalina.out to see if there is any clues.

Kamil B April 16, 2024

@Marc Koppelaar - Devoteam I added this to server.xml:

<Connector relaxedPathChars="[]|" 
relaxedQueryChars="[]|{}^&#x5c;&#x60;&quot;&lt;&gt;" port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
              maxHttpHeaderSize="8192" SSLEnabled="true"
              maxThreads="150" minSpareThreads="25"
              enableLookups="false" disableUploadTimeout="true"
              acceptCount="100" scheme="https" secure="true"
              sslEnabledProtocols="TLSv1.2,TLSv1.3"
              clientAuth="false" useBodyEncodingForURI="true"
              keyAlias="jira" keystoreFile="C:\Program Files\Atlassian\Application Data\Jira\jira.jks" keystorePass="changeit" keystoreType="JKS"/>

and this line:

 <Connector relaxedPathChars="[]|" relaxedQueryChars="[]|{}^&#x5c;&#x60;&quot;&lt;&gt;" acceptCount="100" connectionTimeout="20000" disableUploadTimeout="true" enableLookups="false" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" port="8080" protocol="HTTP/1.1" redirectPort="8443" useBodyEncodingForURI="true"/>

Marc Koppelaar - Devoteam
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
April 16, 2024

Hi @Kamil B 

Check this post and follow these steps. I remember to have used this before and got it all up and running.

adding-ssl-to-jira 

I can't check as I don't have a DC/server instance running anymore.

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
SERVER
VERSION
9.15.0
TAGS
AUG Leaders

Atlassian Community Events