We have an apache proxy with certificates that works. But JIra and Confluence does not trust each other when trying to set up an application link. Traffic seems to go through proxy and terminate. Do I need to set up another set of certificates and point them out in server.xml? Is there a way that application link can be set without ssl?
This is how part that is about certifikate looks like in ssl.conf for apache:
<VirtualHost *:80 *:443>
SSLEngine on
ServerName jira.rmv.se:443
SSLCertificateFile "${SRVROOT}/conf/ssl/star_rmv_se.crt"
SSLCertificateKeyFile "${SRVROOT}/conf/ssl/star_rmv_se.key"
DocumentRoot "${SRVROOT}/htdocs"
CustomLog "${SRVROOT}/logs/ssl_request_jira.log" \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
<Directory "${SRVROOT}/htdocs">
Options Indexes Includes FollowSymLinks
AllowOverride AuthConfig Limit FileInfo
Require all granted
</Directory>
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
ProxyRequests Off
<Proxy *>
Require all granted
</Proxy>
ProxyPass / http://localhost:8080/
ProxyPassReverse / http://localhost:8080/
</virtualhost>
<VirtualHost *:80 *:443>
SSLEngine on
ServerName confluence.rmv.se:443
SSLCertificateFile "${SRVROOT}/conf/ssl/star_rmv_se.crt"
SSLCertificateKeyFile "${SRVROOT}/conf/ssl/star_rmv_se.key"
DocumentRoot "${SRVROOT}/htdocs"
CustomLog "${SRVROOT}/logs/ssl_request_confluence.log" \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
<Directory "${SRVROOT}/htdocs">
Options Indexes Includes FollowSymLinks
AllowOverride AuthConfig Limit FileInfo
Require all granted
</Directory>
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
ProxyRequests Off
<Proxy *>
Require all granted
</Proxy>
ProxyPass /synchrony http://<internal_domain>:8091/synchrony
<Location /synchrony>
Require all granted
RewriteEngine on
RewriteCond %{HTTP:UPGRADE} ^WebSocket$ [NC]
RewriteCond %{HTTP:CONNECTION} Upgrade$ [NC]
RewriteRule .* ws://<internal_domain>:8091%{REQUEST_URI} [P]
</Location>
ProxyPass / http://localhost:8090/
ProxyPassReverse / http://localhost:8090/
<Location />
Require all granted
</Location>
</virtualhost>
# End SNI Demonstration Config
Thankful for suggestions.
All best!
Maria
Recommended Learning For You
Level up your skills with Atlassian learning
Learning Path
Jira Service Management Fundamentals
These short, self-paced courses will help you get up and running in Jira Service Management in just 90 minutes.
Learning Path
ITSM
Use this path to build your IT Service Management knowledge and earn an Atlassian certification.
Setting Up ITSM Projects in Jira Service Management
This training series helps you get started in Jira Service Management quickly with the new ITSM project template.