Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

jira with http and https (letsencrypt)

FScheidig June 11, 2019

Hi guys,

 

I am setting up our own JIRA software server. I also already got me a certificate by letsencrypt (in the default format ".pem" and the private key).

I followed instruction by here, to import the certificates: manual1 but get an error, because I didn't send the cert request to letsencrypt.

I also created the jks by this instructions: manual2 but get an error with finding the key in the key store.

So I have two open questions:

1. How can I create a keystore and import it to Jira?

2. How can I run jira on both ports available (http and https). I do not want a redirection, but a usable http port and a usable https port.

 

Thanks for your help

2 answers

1 accepted

0 votes
Answer accepted
FScheidig June 11, 2019

I got it working:

 

for openssl you can use every 3rdparty tool, listed at openssl's website.

 

If you got your chain and priv key as pem files, you can use those steps:

"openssl.exe" pkcs12 -export -in ***-chain.pem -inkey ***-key.pem -name *yourdomain* -out *yourdomain*.pkcs12

 

keytool -v -importkeystore -srckeystore *yourdomain*.pkcs12 -srcstoretype pkcs12 -destkeystore ***.jks -deststoretype JKS

 

 

 

in the conf/server.xml

 

add those Lines (please replace *** with your data):

<Connector port="8443" relaxedPathChars="[]|" relaxedQueryChars="[]|{}^&#x5c;&#x60;&quot;&lt;&gt;"
maxThreads="150" minSpareThreads="25" connectionTimeout="20000" enableLookups="false" maxHttpHeaderSize="8192" protocol="HTTP/1.1" useBodyEncodingForURI="true"
acceptCount="100" disableUploadTimeout="true" bindOnInit="false"
SSLEnabled="true"
scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="***"
keystorePass="***" />

 

remove the "redirectPort="8443"" from the Connector for port 8080

0 votes
PVS
Banned
June 11, 2019

 

Hi @FScheidig 

Go to the C:\Program Files\Atlassian\JIRA\bin >>Config  File you Can change the http or https Find the Attachments

config 2.PNGconfig.PNG

 

Thanks ,

Venkatesh

PVS
Banned
June 11, 2019

This link is How to create a key All Are in there  This is helps to you 

 

 https://confluence.atlassian.com/adminjiraserver073/running-jira-applications-over-ssl-or-https-861253906.html

FScheidig June 11, 2019

thanks for your fast answer.

I am sorry, but how does it help me, getting http AND https enabled? (I already knew this config tool, which enables "http", "http redirect to https" or "https", but not "http and https")

With saving the configuration for JIRA, I get the error "An error occurred whie writing XML file ... java.io.FileNotFouncException: ../atlassian-jira/WEB-INF/web.xml (the requested operation cannot be performed on a file with a user-mapped section open)

why does the tool want to write to web.xml? I thought it uses server.xml...

Though those errors, after reopening the config.bat, the configuration is still there (I don't know if it wrote the config or saved it internal)

 

As I am running on windows, I used win-acme for getting the certificates (fullchain.pem and key.pem). With this I do not have any request certificate.

I tried importing the gotten certificates with portecle to the jks, but still get "the private key could not be found in the key store".

Suggest an answer

Log in or Sign up to answer