How to configure Bamboo to run over both HTTP and HTTPS

Is there any way to configure Bamboo to run over both HTTP and HTTPS? I've enabled it so that going to https://bamboo returns a page, but users are immediately redirected to the plain HTTP version of the site. I am assuming that this is due to the "Base URL" configuration variable.

What would be ideal is that if a user came in on the HTTPS URL that all associated links in the application recognise this and link to the HTTPS version of the content.

1 answer

Hi Serge,

The Base URL is used for composing links, so it may be the reason why the users are being redirected for HTTP. I suggest you to change it on _Administration -> System -> General Configurations_.

Regarding to the following statement:

What would be ideal is that if a user came in on the HTTPS URL that all associated links in the application recognise this and link to the HTTPS version of the content.

Is that what you meant?

What would be ideal is that if a user came in on the HTTP URL that all associated links in the application recognise this and link to the HTTPS version of the content.

In this case I believe you would need to enable the HTTP -> HTTPS redirect on Jetty. I couldn't find any oficial documentation for that, but the following link may help:

- http://serverfault.com/questions/367660/how-to-have-jetty-redirect-http-to-https

Best regards,
Lucas Timm

Hi Lucas,

Sorry for not having made myself clear. I meant that Bamboo should be fully usable over both HTTP and HTTPS (no redirects from one to the other) based on what URL the user chooses to use. i.e. if the user goest to the HTTPS link, all the URLs used in the application will also be HTTPS. In the case that the user goes to the HTTP link, all URLs will be HTTP.

Basically, having a fully functional site over both HTTP and HTTPS and leaving it up to the user to decide which to use.

The reasoning behind this is that some of our users would like to keep their credentials private and in cases where they use their credentials would prefer to communicate with Bamboo over SSL. In cases where they access Bamboo programatically, they usually use a machine account, in which case speed is preferable over security.

Hope this helps to explain what I originally meant.

I would stick with ALL HTTPS due to base URL issues.

Suggest an answer

Log in or Sign up to answer
How to earn badges on the Atlassian Community

How to earn badges on the Atlassian Community

Badges are a great way to show off community activity, whether you’re a newbie or a Champion.

Learn more
Community showcase
Published yesterday in Marketplace Apps

Tips on how to choose the best estimation method for your planning

Planning and grooming sessions all come with their own sets of rules. Team members meet to estimate stories or other work items, all according to an agreed-upon process. And with every session comes ...

65 views 0 11
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you