Https doesnt work

[vku]

Hi. I use this article https://confluence.atlassian.com/doc/running-confluence-over-ssl-or-https-161203.html?_ga=2.267571598.1475416895.1533519498-1768351994.1532557169 to configure https access to confluence. It doesnt work.

Confluence version 7.2.1.

PostgreSql database instaled

Firewall is off 

Confluence installed on windwos server

ot looks like default tomcat doesnt start 8443 port. 

Config example:

<Connector port="8443" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25"
protocol="org.apache.coyote.http11.Http11Nio2Protocol"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLSv1.2" sslEnabledProtocols="TLSv1.2" SSLEnabled="true"
URIEncoding="UTF-8" keystorePass="changeit"
KeystoreFile="C:\Users\user\.keystore"/>

what wrong? Can you help?

[Cenk Kiliç]

Hello @vku
Hope you are doing well.
My Name is Cenk and I will assist you on the issue.

Pls follow the steps below:

First Open the Start menu, type “Command Prompt ” and select Run as administrator.
Once inside, type the command “netstat -aon” and hit Enter.
You will now see five columns: Protocols, Local Address, Foreign Address, State, and PID (Process ID).
In the Local Address, next to the IP address column you will have a port number.
There look for 8443 which is the port you have assigned for tomcat https.
If you find a line containing 8443 as the port then some other process(PID) is using the same port.

That is why you can not start tomcat on that port.

See the last column of the line(containing 8443) with the name PID.
That is the PID using port 8443 .

If this is the case what you can do is you can :

• Change your port to 8444(check before with netstat -aon to see that it is not used )
• Or you can select another port but be aware not to select a priveleged port(selected port > 1024).

After changing the Connectorport in the conf try to start tomcat.

If this is not the case follow the steps below: 

• Check if the key store file you created is under C:\Users\user\.keystore

If not :

• Check the path where you executed "%JAVA_HOME%\bin\keytool" -genkeypair -keysize 2048 -alias tomcat -keyalg RSA -sigalg SHA256withRSA
  It should create the keystore there.

Copy the keystore file created by this command to C:\Users\user and check if it is name is .keystore .

If not change the name to .keystore or change the keystoreFile value(keystoreFile="<MY_CERTIFICATE_LOCATION>") and set it as your filename.

• Try starting the tomcat again and keep eye on the logs.

Thanks
Cenk KILIC | Atlassian Confluence Support EMEA