Troubleshoot applications links jira and confluence in cluster mode behin apache reverse proxy

[Stéphane PINARD]

Hello,

I am unable to configure the application link between Jira and Confluence, both set up in cluster mode with one node each, configured behind an Apache reverse proxy. I have configured the certificate stores of the OS and Java by adding them to the keystore, but I get an error when creating the link from Jira to Confluence

I tried troubleshooting by enabling the logs as indicated in this post, but I don't see anything obvious: https://confluence.atlassian.com/jirakb/observing-application-link-traffic-for-troubleshooting-purposes-1047548568.html

Here is my apache conf for confluence reverseproxy:

<VirtualHost *:80>
ServerName confluence.mimo.io
Redirect permanent / https://confluence.mimo.io/
</VirtualHost>

<VirtualHost *:443>
ServerName confluence.mimo.io

Header add Set-Cookie "ROUTEID=.%{BALANCER_WORKER_ROUTE}e; path=/" env=BALANCER_ROUTE_CHANGED

<Location /balancer-manager>
SetHandler balancer-manager
Require all granted
</Location>

# Main Synchrony proxy rule
ProxyPass /synchrony balancer://synchrony-http/synchrony

# Synchrony HTTP balancer declaration
<Proxy balancer://synchrony-http>
BalancerMember http://192.168.0.12:8091 route=node_1
BalancerMember http://192.168.0.156:8091 route=node_2

Require all granted
</Proxy>

# Synchrony WebSocket balancer declaration
<Proxy balancer://synchrony-ws>
BalancerMember ws://192.168.0.12:8091 route=node_1
BalancerMember ws://192.168.0.156:8091 route=node_2

Require all granted
</Proxy>

# WebSocket rewrite condition and rules
RewriteEngine On
RewriteCond %{REQUEST_URI} ^/synchrony/(.*)/bayeux-sync1 [NC]
RewriteRule /(.*) balancer://synchrony-ws/$1 [P,L]

# Main Confluence balancer
Header add Set-Cookie "ROUTEID=.%{BALANCER_WORKER_ROUTE}e; path=/" env=BALANCER_ROUTE_CHANGED
<Proxy "balancer://confluence-cluster">
BalancerMember http://192.168.0.12:8090 route=node_1
BalancerMember http://192.168.0.156:8090 route=node_2

ProxySet stickysession=ROUTEID
</Proxy>

# Main Confluence proxy rules
ProxyPass "/" "balancer://confluence-cluster/"
ProxyPassReverse "/" "balancer://confluence-cluster/"

SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/cert.crt
SSLCertificateKeyFile /etc/pki/tls/private/cert.key

ErrorLog /var/log/httpd/confluence.mimo.io_error.log
CustomLog /var/log/httpd/confluence.mimo.io_access.log combined
</VirtualHost>

And here is the configuration of jira's:

<VirtualHost *:80>
ServerName jira.mimo.io

Redirect permanent / https://jira.mimo.io/
</VirtualHost>

<VirtualHost *:443>
ServerName jira.mimo.io

Header add Set-Cookie "ROUTEID=.%{BALANCER_WORKER_ROUTE}e; path=/" env=BALANCER_ROUTE_CHANGED

<proxy balancer://jira-cluster>
BalancerMember http://192.168.0.169:8080 route=node_1
BalancerMember http://192.168.0.21:8080 route=node_2
</proxy>

ProxyRequests Off
ProxyVia Off

<Proxy *>
Require all granted
</Proxy>

ProxyPreserveHost On
ProxyPass "/" "balancer://jira-cluster/" stickysession=ROUTEID
ProxyPassReverse "/" "balancer://jira-cluster/" stickysession=ROUTEID

SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/cert.crt
SSLCertificateKeyFile /etc/pki/tls/private/cert.key

ErrorLog /var/log/httpd/jira.mimo.io_error.log
CustomLog /var/log/httpd/jira.mimo.io_access.log combined
</VirtualHost>

Can someone help me ?