SSL on Windows

Kevin Decker November 16, 2017

I'm in the process of trying to get an SSL certificate on our JIRA setup and I'm running into issues with it. I've followed the documentation and everything seems to be right but when we change the port in the JIRA configuration tool the JIRA service fails to start. We're going through 'letsencrypt' to get an SSL certificate if that helps with anything or if anyone has had any experience using that. 

-Kevin

1 answer

0 votes
Gonchik Tsymzhitov
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
November 16, 2017

Hi Kevin! 

 

Could you provide catalina.out log ? 

Because without log it is so hard to understand problem.

Reference where located logs

https://confluence.atlassian.com/jirakb/where-are-the-application-server-logs-695240952.html

 

Cheers,

Gonchik Tsymzhitov 

Kevin Decker November 16, 2017
Gonchik Tsymzhitov
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
November 16, 2017

Hi Kevin,

Could you provide you connector settings? 


16-Nov-2017 09:16:08.470 WARNING [main] org.apache.catalina.startup.SetAllPropertiesRule.begin [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'keystoreFile' to 'C:\ProgramData\letsencrypt-win-simple\httpsacme-v01.api.letsencrypt.org\jira' did not find a matching property. 16-Nov-2017 09:16:08.470 WARNING [main] org.apache.tomcat.util.IntrospectionUtils.setProperty IntrospectionUtils: InvocationTargetException for class org.apache.catalina.connector.Connector keystorePass=changeit) java.lang.reflect.InvocationTargetException

Looks like your server.xml is not correct.

 

Cheers,

Gonchik Tsymzhitov

Kevin Decker November 18, 2017

From what I was able to determine we were being impacted by this https://jira.atlassian.com/browse/JRASERVER-64082 

So the SSL is working now but the redirection from http to https is not working, users have to manually type in https:// to get to the site. 

Gonchik Tsymzhitov
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
November 18, 2017

About redirects, please, check your server.xml, especcialy connector

<Connector acceptCount="100" connectionTimeout="20000" disableUploadTimeout="true" enableLookups="false" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" port="8080" protocol="HTTP/1.1" redirectPort="<PORT_FROM_STEP_1>" useBodyEncodingForURI="true"/>

 Where you can see redirect port.

Reference is https://confluence.atlassian.com/adminjiraserver071/running-jira-applications-over-ssl-or-https-802593051.html

 

Cheers,

Gonchik Tsymzhitov

Kevin Decker November 19, 2017

Hi Gonchik, 

I checked the server.xml and the redirect port is set to 443 in the line you referenced with the http port set at 80. Any ideas?

Thanks!

-Kevin

Suggest an answer

Log in or Sign up to answer