SSL on Windows

[Kevin Decker]

I'm in the process of trying to get an SSL certificate on our JIRA setup and I'm running into issues with it. I've followed the documentation and everything seems to be right but when we change the port in the JIRA configuration tool the JIRA service fails to start. We're going through 'letsencrypt' to get an SSL certificate if that helps with anything or if anyone has had any experience using that. 

-Kevin

[Gonchik Tsymzhitov]

Hi Kevin! 

Could you provide catalina.out log ? 

Because without log it is so hard to understand problem.

Reference where located logs

https://confluence.atlassian.com/jirakb/where-are-the-application-server-logs-695240952.html

Cheers,

Gonchik Tsymzhitov 

[Kevin Decker]

Here is the catalina log file - thanks! 

https://www.dropbox.com/s/bna0g5jho7titox/catalina.2017-11-16.log?dl=0

[Gonchik Tsymzhitov]

Hi Kevin,

Could you provide you connector settings? 

16-Nov-2017 09:16:08.470 WARNING [main] org.apache.catalina.startup.SetAllPropertiesRule.begin [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'keystoreFile' to 'C:\ProgramData\letsencrypt-win-simple\httpsacme-v01.api.letsencrypt.org\jira' did not find a matching property.
16-Nov-2017 09:16:08.470 WARNING [main] org.apache.tomcat.util.IntrospectionUtils.setProperty IntrospectionUtils: InvocationTargetException for class org.apache.catalina.connector.Connector keystorePass=changeit)
 java.lang.reflect.InvocationTargetException

Looks like your server.xml is not correct.

Cheers,

Gonchik Tsymzhitov

[Kevin Decker]

From what I was able to determine we were being impacted by this https://jira.atlassian.com/browse/JRASERVER-64082 

So the SSL is working now but the redirection from http to https is not working, users have to manually type in https:// to get to the site. 

[Gonchik Tsymzhitov]

About redirects, please, check your server.xml, especcialy connector

<Connector acceptCount="100" connectionTimeout="20000" disableUploadTimeout="true" enableLookups="false" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" port="8080" protocol="HTTP/1.1" redirectPort="<PORT_FROM_STEP_1>" useBodyEncodingForURI="true"/>

 Where you can see redirect port.

Reference is https://confluence.atlassian.com/adminjiraserver071/running-jira-applications-over-ssl-or-https-802593051.html

Cheers,

Gonchik Tsymzhitov

[Kevin Decker]

Hi Gonchik, 

I checked the server.xml and the redirect port is set to 443 in the line you referenced with the http port set at 80. Any ideas?

Thanks!

-Kevin