Bamboo Gadget won't show in JIRA when JIRA is behind SSL Proxy

[Dirk Bromberg]

Hi,

we have JIRA 5.1.5 and Bamboo 4.2.0.

our Bamboo is running local in network. Our JIRA works same location but behind an proxy with HTTPS/SSL! The Application-Links works fine. We see Issues in Bamboo and Builds in JIRA at tickets. And we see the Bamboo activity in Jira activity-stream!

But the 4 Bamboo Gadgets for the Dashboard would'nt work. They work fine till we add the scheme="https"proxyName="jira.xyz.com"proxyPort="443" to the Connector in Server.xml

Any ideas?

Thanks!

Dirk

[Dirk Bromberg · Accepted solution]

So, we found our prob.

Because of the mix with an SSL Hostet JIRA and non SSL Hostet Bamboo the Browser, here "chrome", deactivate the bamboo content. And every time you will view the page you have to click on a button right top at the address line and accept this...

So there was no bug or issue in Atlassian Tools... just at the user... :-)

Thanks...

[Davet]

Hmm...not familiar with pound but check all the likely culprits

grep pound /var/log/messages

and

keytool -v -list -keystore /opt/jdk1.6.0_26/jre/lib/security/cacerts |less

and

openssl s_client -connect your.web.site:443

[Davet]

They work fine till we add the scheme="https"proxyName="jira.xyz.com"proxyPort="443" to the Connector in Server.xml

You dont actually define what "wouldnt work" means but when you add those settings to server.xml you should add to your ssl.conf something like

Proxyrequests off

ProxyPreserveHost Off

ProxyPass / http://localhost:8090/

ProxyPassReverse / http://localhost:8090/

[Dirk Bromberg]

Okay, the Bamboo Gadgets are empty and won't show any content or settings.

Hm, currently we use pound as proxy not apache...

[Dirk Bromberg]

Hm,

we are trying apache httpd vs. pound...

But i don't know that this is an issue of the reverse proxy because the jira sees the bamboo without going over the proxy...

[Davet]

With apache, when those settings are added to server.xml the apache ssl.conf needs to be reconfigured and from what I have seen of pound the same should be true.

When you do add those settings you need to check the resulting URL is correctly constructed e.g. make sure it is not http(s)://localhost or some such thing and that the name can be resolved by DNS

[LucasA]

Hi Dirk,

Have you specified the Bamboo certificate to your JIRA java keystore according described here? Note that this is not needed if you specified your java keystore on the JIRA Tomcat -- in this case you only need to import the Bamboo certificate over there.

Best regards,
Lucas Timm

[Dirk Bromberg]

Hi Lucas,

the Bamboo is not running with SSL only the JIRA is behind the proxy with SSL.

And yes the certificate for JIRA is in the keystore for bamboo.

When this is not i get trouble with linking builds or issues in jira and / or bamboo.

Thanks

Dirk