SSL on Windows

I'm in the process of trying to get an SSL certificate on our JIRA setup and I'm running into issues with it. I've followed the documentation and everything seems to be right but when we change the port in the JIRA configuration tool the JIRA service fails to start. We're going through 'letsencrypt' to get an SSL certificate if that helps with anything or if anyone has had any experience using that. 

-Kevin

1 answer

0 vote
Gonchik Tsymzhitov Community Champion Nov 16, 2017

Hi Kevin! 

 

Could you provide catalina.out log ? 

Because without log it is so hard to understand problem.

Reference where located logs

https://confluence.atlassian.com/jirakb/where-are-the-application-server-logs-695240952.html

 

Cheers,

Gonchik Tsymzhitov 

Gonchik Tsymzhitov Community Champion Nov 16, 2017

Hi Kevin,

Could you provide you connector settings? 


16-Nov-2017 09:16:08.470 WARNING [main] org.apache.catalina.startup.SetAllPropertiesRule.begin [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'keystoreFile' to 'C:\ProgramData\letsencrypt-win-simple\httpsacme-v01.api.letsencrypt.org\jira' did not find a matching property. 16-Nov-2017 09:16:08.470 WARNING [main] org.apache.tomcat.util.IntrospectionUtils.setProperty IntrospectionUtils: InvocationTargetException for class org.apache.catalina.connector.Connector keystorePass=changeit) java.lang.reflect.InvocationTargetException

Looks like your server.xml is not correct.

 

Cheers,

Gonchik Tsymzhitov

From what I was able to determine we were being impacted by this https://jira.atlassian.com/browse/JRASERVER-64082 

So the SSL is working now but the redirection from http to https is not working, users have to manually type in https:// to get to the site. 

Gonchik Tsymzhitov Community Champion Nov 18, 2017

About redirects, please, check your server.xml, especcialy connector

<Connector acceptCount="100" connectionTimeout="20000" disableUploadTimeout="true" enableLookups="false" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" port="8080" protocol="HTTP/1.1" redirectPort="<PORT_FROM_STEP_1>" useBodyEncodingForURI="true"/>

 Where you can see redirect port.

Reference is https://confluence.atlassian.com/adminjiraserver071/running-jira-applications-over-ssl-or-https-802593051.html

 

Cheers,

Gonchik Tsymzhitov

Hi Gonchik, 

I checked the server.xml and the redirect port is set to 443 in the line you referenced with the http port set at 80. Any ideas?

Thanks!

-Kevin

Suggest an answer

Log in or Sign up to answer
How to earn badges on the Atlassian Community

How to earn badges on the Atlassian Community

Badges are a great way to show off community activity, whether you’re a newbie or a Champion.

Learn more
Community showcase
Published yesterday in Jira Software

How large do you think Jira Software can grow?

Hi Atlassian Community! My name is Shana, and I’m on the Jira Software team. One of the many reasons this Community exists is to connect you to others on similar product journeys or with comparabl...

151 views 4 7
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you