HTTPS base URL not applied correctly

[dowen]

Our Jira instance is behind an F5, which applies TLS. The connection between Jira and the F5 is unsecured over port 8080.

The base URL in Jira settings is https://<instance_name>:8080.

Jira seems to ignore this, and instead redirects to http://<instance_name>:8080. The Jira logs also show that the base URL is http:// not https://, as shown in the settings UI.

What needs to be done to force Jira to use the base URL entered in the settings?

[Dieter · Accepted solution]

It is not common to run SSL over the port 8080. I'd have expected you want your end users to use https://<instance-name> (port 443) in the browser and thus configure this base URL in JIRA. Why did you choose this base URL?

As a general rule, the comfigured base URL must match the scheme, the server and port that returned by the servlet API. You can configure these values using the parameters scheme="https", proxyName="instance_name" and proxyPort=8080 in the definition of connector of port 8080 in server.xml. I'd also suggest to remove the parameter redirectPort from the definitiom of port 8080

Though written for Apache reverse proxy the general rules about the base url apply to any kid of firewall in front of Jira. Please read this: https://confluence.atlassian.com/display/JIRA/Integrating+JIRA+with+Apache

[dowen]

Hi Dieter,

Thanks for the prompt and thorough response. I updated my server.xml based on the suggestions above and the issue is resolved.

Thanks!