SSL on Windows

I'm in the process of trying to get an SSL certificate on our JIRA setup and I'm running into issues with it. I've followed the documentation and everything seems to be right but when we change the port in the JIRA configuration tool the JIRA service fails to start. We're going through 'letsencrypt' to get an SSL certificate if that helps with anything or if anyone has had any experience using that. 

-Kevin

1 answer

0 vote
Gonchik Tsymzhitov Community Champion Nov 16, 2017

Hi Kevin! 

 

Could you provide catalina.out log ? 

Because without log it is so hard to understand problem.

Reference where located logs

https://confluence.atlassian.com/jirakb/where-are-the-application-server-logs-695240952.html

 

Cheers,

Gonchik Tsymzhitov 

Gonchik Tsymzhitov Community Champion Nov 16, 2017

Hi Kevin,

Could you provide you connector settings? 


16-Nov-2017 09:16:08.470 WARNING [main] org.apache.catalina.startup.SetAllPropertiesRule.begin [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'keystoreFile' to 'C:\ProgramData\letsencrypt-win-simple\httpsacme-v01.api.letsencrypt.org\jira' did not find a matching property. 16-Nov-2017 09:16:08.470 WARNING [main] org.apache.tomcat.util.IntrospectionUtils.setProperty IntrospectionUtils: InvocationTargetException for class org.apache.catalina.connector.Connector keystorePass=changeit) java.lang.reflect.InvocationTargetException

Looks like your server.xml is not correct.

 

Cheers,

Gonchik Tsymzhitov

From what I was able to determine we were being impacted by this https://jira.atlassian.com/browse/JRASERVER-64082 

So the SSL is working now but the redirection from http to https is not working, users have to manually type in https:// to get to the site. 

Gonchik Tsymzhitov Community Champion Nov 18, 2017

About redirects, please, check your server.xml, especcialy connector

<Connector acceptCount="100" connectionTimeout="20000" disableUploadTimeout="true" enableLookups="false" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" port="8080" protocol="HTTP/1.1" redirectPort="<PORT_FROM_STEP_1>" useBodyEncodingForURI="true"/>

 Where you can see redirect port.

Reference is https://confluence.atlassian.com/adminjiraserver071/running-jira-applications-over-ssl-or-https-802593051.html

 

Cheers,

Gonchik Tsymzhitov

Hi Gonchik, 

I checked the server.xml and the redirect port is set to 443 in the line you referenced with the http port set at 80. Any ideas?

Thanks!

-Kevin

Suggest an answer

Log in or Join to answer
Community showcase
Sarah Schuster
Posted Jan 29, 2018 in Jira

What are common themes you've seen across successful & failed Jira Software implementations?

Hey everyone! My name is Sarah Schuster, and I'm a Customer Success Manager in Atlassian specializing in Jira Software Cloud. Over the next few weeks I will be posting discussion topics (8 total) to ...

3,187 views 13 19
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you
Atlassian Team Tour

Join us on the Team Tour

We're bringing product updates and pro tips on teamwork to ten cities around the world.

Save your spot