Jira DC with HTTPS

[Philippe Bouyssou]

Hi and thanks in advance, 

I've followed Rodney Nissen's tuto about "Running SSL Directly to Jira [The Jira Guy]. 

It appears that Rodney used Digicert CA.

Which other (free?) CA cert is working with Jira DC ? Is there recommended ones ?

I'm using Cloudflare as DNS.

I've tried let's encrypt cert or Cloudflare "Origin server PEM" without success.

I've tried to understand java keytool for keystore required for server.xml & web.xml config with mixed success.

I'm totally desperate with a lot of success.

How to use Jira DC in httpS ?

Thanks a lot to share.

Sincerely,

Philippe

[Philippe Bouyssou]

Hi and thanks for your answer Marc! 

However, i already have this link in my favorite... :( 

(I'm using a Debian server without X11 Display)

In this Confluence page : 

<< A list of CAs can be found here. Some of the most well known CAs are: >>

doesn't work, seems refer to 

https://www.dmoz.org/Computers/Security/Public_Key_Infrastructure/PKIX/Tools_and_Services/Third_Party_Certificate_Authorities/

I'm going to try Cloudflare as CA. 

Could you let this ticket open if others answers were to come thick and fast ? 

Thanks for help Marc. 

Philippe

[John Funk]

Hi @Philippe Bouyssou  - Please place your replies below the post you are replying to so readers can follow the flow of the conversation. 

[Marc - Devoteam]

Hi @Philippe Bouyssou 

The official documentation can be fond here, running-jira-applications-over-ssl-or-https 

I think you could use a free CA like Cloudfare.

[Philippe Bouyssou]

Thanks Marc i'll have a new look to try again and share. 

[Philippe Bouyssou]

Hi 

I consulted again the official documentation you mentionned. 

I'm trying to use a Atlassian Jira DC server with my Cloudflare DNS record "domain.com" over SSL.

I've imported "origin_ca_rsa_root.pem" certificate and "mydomain.com.pem" generated on Cloudflare Origin server with CSR generated under Java keystore (keytool).
I've enabled setting ON under the << SSL/TLS >> tab, on “Edge Certificates”.
I've tried to test, under Overview, all the SSL modes without success (Full (Recommended) – Full (Strict) – Flexible).

I had to modify the Tomcat config files to use SSL (server.xml and web.xml).

- If my Cloudflare DNS A record works fine for http://domain.com, when i modify the Tomcat config files to use SSL httpS://domain.com request returns a "Web server is down Error code 521". It seems that Cloudflare is unable to connect to my origin server (Tomcat) over SSL.

- On my localhost, https://localhost:8443 returns :

SSL Error: The certificate is NOT trusted. The certificate issuer is unknown. - Continue ? (n)

which could suggest that the issue might be related to the certificate configuration.

Thanks In Advance

Sincerely,
Philippe

[Philippe Bouyssou]

Hi! 

Is there a doc / MOP to enable Jira DC with SSL ?

If we use Jira Cloud version, is SSL enabled by you ?

Thanks in advance

Philippe

[Marc - Devoteam]

HI @Philippe Bouyssou 

Yes, all is in this doc: https://confluence.atlassian.com/adminjiraserver/running-jira-applications-over-ssl-or-https-938847764.html 

Cloud is always SSL, handled by Atlassian.

P.S. This is an open community forum, not Atlassian Support.

Most responders here do this on a voluntary basis

[Philippe Bouyssou]

Hi, 

<< Cloud is always SSL, handled by Atlassian. >>

Thanks.

<< P.S. This is an open community forum, not Atlassian Support.

Most responders here do this on a voluntary basis >>

I clearly understand Marc, but i'm testing Atlassian Jira DC and i suppose i can't have access to Atlassian Support. 

So i would like to share to open community: 

With Atlassian Jira DC 10.6 + Clouflare DNS + CF cert (origin server)

i finally get requests : 

https://mydomain.org:8443 -------------> Works SSL ok!

however : 

https://mydomain.org ---------------------> 521...

I have to point to port 8443 to successfully load TLS page.

My dstnat port forwarding on my router (Jira DC) for these 2 requests are : 

public:80     > local:8443
public:8443 > local:8443

Could someone help or may be it refers more to Cloudflare than Atlassian ?

Thanks for your time and to share.