Bitbucket Mirror - unable to use https

[Igor Dimoski]

Hi,

 We have an issue of accessing a bitbucket-mirror instance. We have installed v4.11.2 and i can access it on hostname:7990, but I cant access it on 8443 port.

I have done everything from the documentation - enabling connector 8443 with all the config options. But I think there is a problem with the keystore, I have a certificate.pem and I have a private key.

<Connector port="8443" maxHttpHeaderSize="8192" SSLEnabled="true" maxThreads="150" minSpareThreads="25" maxSpareThreads="75" enableLookups="false" disableUploadTimeout="true" useBodyEncodingForURI="true" acceptCount="100" scheme="https" secure="true" clientAuth="false" sslProtocol="TLSv1.2" />

When I dont put keystoreFile and keystorepass parameters i get the following error, which is understandable btw :

3-May-2018 14:16:24.149 SEVERE [main] org.apache.coyote.AbstractProtocol.init Failed to initialize end point associated with ProtocolHandler ["http-nio-8443"]
 java.io.FileNotFoundException: /home/atlbitbucket/.keystore (No such file or directory)

First off all I dont have .jks file and I am not sure how to generate/create one (i have tried some openssl cmd's without success)

I have tried to pass the path of my certificate and private key path to the keystoreFile but then I get the error Caused by: java.io.IOException: Invalid keystore format

Also, I have edited the httpd.conf with the following

<VirtualHost *:443> SSLEngine On SSLCertificateFile "/Pathtofile" SSLCertificateKeyFile "pathto.key" SSLCertificateChainFile "pathto.crt"

Here I have a problem that I dont understand what I should put in the </contextpath> regarding the  ProxyPass and  ProxyPassReverse  paramaters:

ProxyPass <contextpath> http://servername;port </contextpath>

I dont know what I am doing wrong, and I am starting to think that the problem could be in certificate itself.

Would appreciate if someone would explain to me how to proceed.

Thank You :)

[Prasanth]

Hi Igor,

If you are configuring the certificate in Tomcat's server.xml, you can try converting the PEM certificate and the key to Java keystore as mentioned in  Converting PEM-format keys to JKS format and then specify the keystore path in you connection setting

<Connector port="8443" maxHttpHeaderSize="8192" 
SSLEnabled="true" maxThreads="150" minSpareThreads="25" 
maxSpareThreads="75" enableLookups="false" 
keystoreFile=

Please see Securing Bitbucket

Below suggest that you are tying to configure the SSL in your Apache reverse proxy.

<VirtualHost *:443> SSLEngine On SSLCertificateFile "/Pathtofile" SSLCertificateKeyFile "pathto.key" SSLCertificateChainFile "pathto.crt"

Here I have a problem that I dont understand what I should put in the </contextpath> regarding the  ProxyPass and  ProxyPassReverse  paramaters:

Please see Securing your Atlassian applications with Apache using SSL for details. VirtualHost configuration section of the above document has some details as below which help you to configure SSL in the reverse proxy.

 ProxyPass /<contextpath> http://<domain>:<port>/<contextpath>
    ProxyPassReverse /<contextpath> http://<domain>:<port>/<contextpath>

context path is with which you will be accessing BItbucket and configured any context path in application. e.g. https://mybitbucket/mycontext. If you don't want to add any context path, you just need to keep "/" 

Let us know how it goes.

Regards,

Prasanth - Atlassian