It's not the same without you
Join the community to find out what other Atlassian users are discussing, debating and creating.
I Stash is installed on a remote server that is accessed via Apache (proxy).
Under https://example.com/stash want the server to be accessible. Calling the URL I will reflect back at http://example.com/stash/login, but there is no stash installed.
Apache:
<VirtualHost example.com:443> SSLEngine On SSLCertificateFile /etc/apache2/ssl/apache.crt SSLCertificateKeyFile /etc/apache2/ssl/apache.key ServerSignature Off # Atlassian Stash Configuration ProxyPass /stash http://localhost:7990/stash connectiontimeout=5 timeout=300 ProxyPassReverse /stash http://localhost:7990/stash </VirtualHost>
Tomcat (conf/server.xml)
... <Service name="Catalina"> ... <Connector port="7990" protocol="HTTP/1.1" connectionTimeout="20000" useBodyEncodingForURI="true" redirectPort="443" compression="on" compressableMimeType="text/html,text/xml,text/plain,text/css,... secure="true" schema="https" proxyName="developer.kirchnerei.de" proxyPort="443"/> ... <Host name="localhost" appBase="webapps" unpackWARs="true" autoDeploy="true" xmlValidation="false" xmlNamespaceAware="false"> ... <Context path="/stash" docBase="${catalina.home}/atlassian-stash" reloadable="false" useHttpOnly="true"/> ... </Host> ... </Service>
How to config Stash to access only over https?
Thanks
Hi Mulder,
Under https://example.com/stash want the server to be accessible. Calling the URL I will reflect back athttp://example.com/stash/login, but there is no stash installed.
This tells me that your Apache server is configured correctly, but Tomcat seems to think it's running on http, not https. You can confirm this by opening https://developer.kirchnerei.de/stash/login directly. If a Stash page shows up, it confirms that the Apache configuration is fine. When you actually login, Stash will redirect you to http://developer.kirchnerei.de/stash/projects which will not work (because of the http instead of https).
Your Tomcat configuration looks fine; we're using the same configuration internally for our Stash dogfooding server. Are you sure you're modifying the correct server.xml? If you're running Stash from the bundled Tomcat server, it should be the STASH_INST/conf/server.xml.
Cheers,
Michael
Hi Michael,
thanks for your answer. I reinstall stash again and I use the Documentation https://confluence.atlassian.com/display/STASH/Integrating+Stash+with+Apache+HTTP+Server.
And magic ... I got it to run...
Cheers,
Sarah
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Mulder
If Apache is the front-end server, all you have to do is keep this configuration and do not configure the "<Vistualhost> " settings for port 80 (clear text).
However, if you might having the following settings, you should change the Stash setting in order to bind a SSL port too, installing a new certiicate and so on. For further details, please use the following page as your guideline.
Envrionment:
Client Browser --> HTTPS --> Apache proxy --> HTTPS --> Tomcat/STASH
For further details:
https://confluence.atlassian.com/display/STASH/Securing+Stash+with+HTTPS
Cheers,
Paulo Renato
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Paulo,
I am sorry, but I need more information.
There are 2 help documents
But I can find the solution. do you have a example configuration?
Thanks a lot
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hey admins! I’m Dave, Principal Product Manager here at Atlassian working on our cloud platform and security products. Cloud security is a moving target. As you adopt more products, employees consta...
Connect with like-minded Atlassian users at free events near you!
Find a groupConnect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.
Start an AUGYou're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.