The Atlassian Community Forums are currently in read-only mode. We will be relaunching on a new platform on September 22 (read more here). We apologize for the extended downtime. For concerns or questions, please email communitymanagers@atlassian.com. See you on the other side, on the new Atlassian Community Forums! :)

×

Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Switch from HTTP to HTTPS

Jonathan
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
November 18, 2019

Hi Experts,

I have a JIRA server-core instance that is running internally with HTTP.  We want to move away from unsecure URL's to using a wildcard SSL cert of ours. 

For example: 
before: http://jira.home.com:8080
after:  https://jira.home.com

What is the simplest way of doing this?  I am currently trying to change server.xml to make this work but i must be doing something wrong because whenever I try updating things here Jira refuses to startup.  I have a *.home.com wildcard SSL cert in pfx, crt, and .key formats using OpenSSL.

 

1 answer

Comments for this post are closed

Community moderators have prevented the ability to post new answers.

0 votes
DPKJ
Community Champion
November 18, 2019

@JonathanWelcome to the community!

It is a great move. Using HTTP in today's age is not a great choice for an organization. Coming to the problem in hand,

  • The best way to do this is by using reverse proxy server,
    • You install reverse proxy server (like Nginx or Apache HTTPD)
    • And proxy setting that redirect all incoming request to Jira.
  • This way you don't have to change anything in your Jira configuration, (this is also very helpful when you upgrade Jira)
  • Also, you can block access on port 8080 from outside world, and just allow people to connect of 443 (default https port) and also redirect port 80 to 443.
  • Using reverse proxy will also ensure that you don't have to add certificates to every application in organization, and you can store it at single place

Here are some references,