jira access via https (443) port issue

Gao Xiang September 6, 2012

hi

my jira address is https://203.120.121.167:8443/secure/Dashboard.jspa

i want chage it to https://203.120.121.167/secure/Dashboard.jspa

how can i do this.

thanks and regards.

(server.txt)

4 answers

1 accepted

0 votes
Answer accepted
Gao Xiang September 10, 2012

hi guys, thanks for all your anwsers.

i re-install the jira on port 80 and use port 443 for ssl protocol.

the issue had been fixed.

0 votes
FagnerF
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
September 10, 2012

Hello Xiang,

As Marc said you should type into the file /install/conf/server.xml the following:

<Connector port="8443" 
maxHttpHeaderSize="8192"
maxThreads="150"
minSpareThreads="25"
maxSpareThreads="75"
enableLookups="false"
disableUploadTimeout="true"
acceptCount="100"
scheme="https"
secure="true"
clientAuth="false"
sslProtocol="TLS"
SSLEnabled="true"
URIEncoding="UTF-8"
keystoreFile="c:/Java/jdk1.6.0_33/bin/.keystorefile"
keystorePass="keyname"
keyAlias="/secure"/>

If you don't want to use SSL you have to remove the lines "keystoreFile" and "keystorePass".

Also you ought to have a proxy server in front of JIRA server to redirect https://203.120.121.167/secure request to https://203.120.121.167:8443/secure . You can set up an Apche server with AJP connector that translates every resquest on port 8443. You can check out it how to configure.

0 votes
Marc September 6, 2012

Hello Xiang,



please see under {application-directory}/conf/server.xml

<Service name="Catalina">
        <Connector port="443"
                   maxThreads="150"
                   minSpareThreads="25"
                   maxSpareThreads="75"
                   connectionTimeout="20000"
        ...

When you change the port in connector-configuration your Tomcat need a reboot.

A better way is to install a apache webserver in front. The Apache does handle SSL and proxy any permitted request to 127.0.0.1:8080 (HTTP only).


Best regards
MarC

0 votes
Marc September 6, 2012

Hello Xiang,

please see under {application-directory}/conf/server.xml

<Service name="Catalina">
        <Connector port="443"
                   maxThreads="150"
                   minSpareThreads="25"
                   maxSpareThreads="75"
                   connectionTimeout="20000"
        ...



When you change the port in connector-configuration your Tomcat need a reboot.

A better way is to install a apache webserver in front. The Apache does handle SSL and proxy any permitted request to 127.0.0.1:8080 (HTTP only). Your firewall allow only port 443 for accessing from outside.


Best regards
MarC

Gao Xiang September 9, 2012

hi marc

i change the port, it doesn't direct to jira.just tell me i can not access the folder.

can you tell me the details on how the Apache handle ssl.

thanks in advance.

Harry Chan
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
September 9, 2012

Hi, can you confirm if the firewall is open on port 443? I wouldn't really introduce Apache with just one instance. It introduces overhead for no reason.

The config MarC provided should work. Maybe you can post your server.xml if you've made other changes.

Gao Xiang September 9, 2012

attached is the server.xml file.

kindly help me review.

Suggest an answer

Log in or Sign up to answer