How do you terminate SSL in Tomcat for Synchrony?

[David Jensen]

We are currently in the process of getting Confluence to run over HTTPS. We are running windows server 2012 and are not using a reverse proxy. We have the cert installed and I have configured the server xml file so it is running over https, but we are getting the following error in the browser "this page is trying to load scripts from unauthenticated source". After checking the console in the developer tools of the chrome browser, the following error message was found. 

"Confluence.domain.com was loaded over HTTPS, but requested an insecure script 'http:/confluence/synchrony-proxy/resources/js/vendor/sockjs.min.js'. This request has been blocked; the content must be served over HTTPS"

[Balaji J]

Hi David,

Did you find a way a fix this, we are facing same issue and request your inputs and steps to fix the same.

Thanks,

Balaji

[Gonchik Tsymzhitov]

Hi! 

Looks like you will spend a lot of time for terminate to ssl. 

Could you try to use revers proxy?

Because a lot of documentation based working with synchrony based on revers proxy. (e.g. nginx -> https://confluence.atlassian.com/confeap/running-confluence-behind-nginx-with-ssl-849150880.html)

You can see in this docs: 

https://confluence.atlassian.com/doc/running-confluence-over-ssl-or-https-161203.html

a small quote:

 Avoid removing the http connector, as the Synchrony proxy health check, still requires HTTP. If you do not want to include the http connector, you can use the synchrony.proxy.healthcheck.disabled system property to disable the health check. You should also not disable the internal Synchrony proxy (by setting the synchrony.proxy.enabled system property to false) as this is known to cause problems when you're terminating SSL at Tomcat. 


And please review your synchrony design below this docs 
https://confluence.atlassian.com/doc/administering-collaborative-editing-858772086.html