Confluence Installation - Connect with JIRA Error

[Jason Rider]

I am trying to setup Confluence 5.8.14, and trying to connect with JIRA 7.0. I get to the part where I connect it to JIRA, and it errors out, giving an error on the JIRA Base URL.

Connection refused. Check if an instance of JIRA 4.3 or later is running on the given url.

My JIRA is behind the Apache Proxy with SSL.  My JIRA Base URL that I enter is https://jira.server.com

If I bypass the proxy (http://jira.server.com:8080/), then, all is good. 

Googled issues, and I think the error would likely be SSL.  I couldn't find anything in the logs (/opt/atlassian/confluence/logs/catalina.out or /opt/atlassian/jira/logs/catalina.out).

I grabbed the public key from JIRA by doing:

sudo openssl s_client -connect jira.server.com:443 < /dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > JiraPublic.crt

I then added it to the Confluence Java KeyStore:

sudo /opt/atlassian/confluence/jre/bin/keytool -import -alias JiraServer -keystore /opt/atlassian/confluence/jre/lib/security/cacerts -file /location/of/JiraPublic.crt

I restarted Confluence.  This caused an major error.  Apparently, restarting confluence in middle of Setup is bad (I thought it would just pick up from where I left off). 

So I just uninstalled Confluence (and removed both the Home Directory and Installation Directory.  I tried removingn the configuration.cfg.xml file, but didn't work)

Reinstalled Confluence

Stopped Confluence

Installed the keystore from above

sudo /opt/atlassian/confluence/jre/bin/keytool -import -alias JiraServer -keystore /opt/atlassian/confluence/jre/lib/security/cacerts -file /location/of/JiraPublic.crt

Started Confluence

Ran Setup Again.

Got the same error.

Any ideas? 

[Jason Rider · Accepted solution]

Update, I have figured it out.  When I initially did this, I think I forgot to install the PublicKey into the keystore the 2nd time (right after I reinstalled Confluence).  Once I added the key to the Confluence JRE KeyStore, BEFORE the setup, I was able to connect to JIRA fine after that.

[Graham]

Thanks @jaesun, you sent me the right direction.  Worth adding that in my case this was a self-signed cert (as these servers are for our company's internal network only) so when installing the cert to the keystore I also had to add -trustcacerts to explicitly trust this cert without a CA,