Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

After installing SSL certificate JIRA & FishEye (Linux instances) site is not coming up

Prathamesh Ghuge July 1, 2019

I have Installed and configured server JIRA 8.2 and FishEye 4.7.0. I have .x509 certificate which I converted into keystore and tried installing it in JIRA and FishEye servers. But after installation site for JIRA and FishEye is not coming up. Request your help.

1 answer

0 votes
Dave Theodore [Coyote Creek Consulting]
Community Champion
July 1, 2019

Passphrase on the key? 

I would recommend not doing it this way. There are two basic problems with having Jira and/or Fisheye handle SSL termination. First, it's harder this way. It's a hassle to import the certs, when the cert expires and you need to update it, you have to bounce Fisheye, etc.  The second is for security reasons.  You cannot bind to TCP:443 as an unprivileged user. This means that you will need to run Fisheye and Jira as root/administrator. If there is a vulnerability that allows for remote code execution, this will be done as root and it is trivial to compromise the server.  

A better solution would be to set up a reverse proxy server on the Fisheye and Jira server(s) that does 80 -> 443 redirection, SSL termination and proxy to Fisheye on 127.0.0.1:8060 and Jira to 127.0.0.1:8080  Atlassian has docs for Apache and other popular reverse proxy servers.

Suggest an answer

Log in or Sign up to answer