jira with http and https (letsencrypt)

[FScheidig]

Hi guys,

I am setting up our own JIRA software server. I also already got me a certificate by letsencrypt (in the default format ".pem" and the private key).

I followed instruction by here, to import the certificates: manual1 but get an error, because I didn't send the cert request to letsencrypt.

I also created the jks by this instructions: manual2 but get an error with finding the key in the key store.

So I have two open questions:

1. How can I create a keystore and import it to Jira?

2. How can I run jira on both ports available (http and https). I do not want a redirection, but a usable http port and a usable https port.

Thanks for your help

[FScheidig · Accepted solution]

I got it working:

for openssl you can use every 3rdparty tool, listed at openssl's website.

If you got your chain and priv key as pem files, you can use those steps:

"openssl.exe" pkcs12 -export -in ***-chain.pem -inkey ***-key.pem -name *yourdomain* -out *yourdomain*.pkcs12

keytool -v -importkeystore -srckeystore *yourdomain*.pkcs12 -srcstoretype pkcs12 -destkeystore ***.jks -deststoretype JKS

in the conf/server.xml

add those Lines (please replace *** with your data):

<Connector port="8443" relaxedPathChars="[]|" relaxedQueryChars="[]|{}^&#x5c;&#x60;&quot;&lt;&gt;"
maxThreads="150" minSpareThreads="25" connectionTimeout="20000" enableLookups="false" maxHttpHeaderSize="8192" protocol="HTTP/1.1" useBodyEncodingForURI="true"
acceptCount="100" disableUploadTimeout="true" bindOnInit="false"
SSLEnabled="true"
scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="***"
keystorePass="***" />

remove the "redirectPort="8443"" from the Connector for port 8080

[PVS]

Hi @FScheidig 

Go to the C:\Program Files\Atlassian\JIRA\bin >>Config  File you Can change the http or https Find the Attachments

Thanks ,

Venkatesh

[PVS]

This link is How to create a key All Are in there  This is helps to you 

 https://confluence.atlassian.com/adminjiraserver073/running-jira-applications-over-ssl-or-https-861253906.html

[FScheidig]

thanks for your fast answer.

I am sorry, but how does it help me, getting http AND https enabled? (I already knew this config tool, which enables "http", "http redirect to https" or "https", but not "http and https")

With saving the configuration for JIRA, I get the error "An error occurred whie writing XML file ... java.io.FileNotFouncException: ../atlassian-jira/WEB-INF/web.xml (the requested operation cannot be performed on a file with a user-mapped section open)

why does the tool want to write to web.xml? I thought it uses server.xml...

Though those errors, after reopening the config.bat, the configuration is still there (I don't know if it wrote the config or saved it internal)

As I am running on windows, I used win-acme for getting the certificates (fullchain.pem and key.pem). With this I do not have any request certificate.

I tried importing the gotten certificates with portecle to the jks, but still get "the private key could not be found in the key store".