Jira8 is not rendering gadget titles correctly when running behind f5 reverse proxy terminating ssl

[Krishna Molugu]

Hi There,

We recently upgraded from Jira 7 and Jira 8. Gadget titles are showing incorrectly. Our new Jira 8 instance is running behind F5 reverse proxy and we are offloading ssl on F5. I found this link: https://confluence.atlassian.com/jirakb/fix-gadget-titles-showing-as-__msg_gadget-in-jira-server-813697086.html  , But I don't find much information on how we can fix this when we are terminating ssl at reverse proxy.  Any help would be really appreciable. 

Thanks,

Kr

[Fabio Racobaldo _Herzum_]

Hi @Krishna Molugu ,

this is an usual issue when certificate is not correctly installed on jdk associated to your JIRA.

Please, take a look to that article https://confluence.atlassian.com/kb/how-to-import-a-public-ssl-certificate-into-a-jvm-867025849.html

After doing that, issue shloud be fixed.

Hope this helps,

Fabio

[Krishna Molugu]

@Fabio Racobaldo _Herzum_  Thank you so much for the response. But we are terminating ssl on F5 (load balancer), backend it uses http. do I still need to import the cert on jdk? or Is there a way to bypass reverse proxy when rendering gadget url? Please let me know/

Thanks,

Kr. 

[Fabio Racobaldo _Herzum_]

@Krishna Molugu , try to import crt file into jdk associated to your JIRA. Usually it fixes your issues. Even if you have a reverse proxy and load balancer, you need certificate on JIRA side.

[Krishna Molugu]

@Fabio Racobaldo _Herzum_  Thanks again. I have tried importing the wildcard public cert we use in the organization to jdk associated with Jira. I am still seeing the same issue, it is not loading correctly.

When I am doing the curl to VIP, I am getting below error, I think it is due to SSL termination at F5. 

OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to xxxxx:443
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to xxxx:443

Is there any alternative way to bypass the reverse proxy for gadget url's,  we are bypassing reverse proxy for our application links, but not finding anything in this case. Is it mandatory to enable ssl on the jira server to make this work? Thanks again for the help. Truly appreciate it.