jira access via https (443) port issue

[Gao Xiang]

hi

my jira address is https://203.120.121.167:8443/secure/Dashboard.jspa

i want chage it to https://203.120.121.167/secure/Dashboard.jspa

how can i do this.

thanks and regards.

(server.txt)

[Gao Xiang · Accepted solution]

hi guys, thanks for all your anwsers.

i re-install the jira on port 80 and use port 443 for ssl protocol.

the issue had been fixed.

[FagnerF]

Hello Xiang,

As Marc said you should type into the file /install/conf/server.xml the following:

<Connector port="8443" 
maxHttpHeaderSize="8192"
maxThreads="150"
minSpareThreads="25"
maxSpareThreads="75"
enableLookups="false"
disableUploadTimeout="true"
acceptCount="100"
scheme="https"
secure="true"
clientAuth="false"
sslProtocol="TLS"
SSLEnabled="true"
URIEncoding="UTF-8"
keystoreFile="c:/Java/jdk1.6.0_33/bin/.keystorefile"
keystorePass="keyname"
keyAlias="/secure"/>

If you don't want to use SSL you have to remove the lines "keystoreFile" and "keystorePass".

Also you ought to have a proxy server in front of JIRA server to redirect https://203.120.121.167/secure request to https://203.120.121.167:8443/secure . You can set up an Apche server with AJP connector that translates every resquest on port 8443. You can check out it how to configure.

[Marc]

Hello Xiang,



please see under {application-directory}/conf/server.xml

<Service name="Catalina">
        <Connector port="443"
                   maxThreads="150"
                   minSpareThreads="25"
                   maxSpareThreads="75"
                   connectionTimeout="20000"
        ...

When you change the port in connector-configuration your Tomcat need a reboot.

A better way is to install a apache webserver in front. The Apache does handle SSL and proxy any permitted request to 127.0.0.1:8080 (HTTP only).


Best regards
MarC

[Marc]

Hello Xiang,

please see under {application-directory}/conf/server.xml

<Service name="Catalina">
        <Connector port="443"
                   maxThreads="150"
                   minSpareThreads="25"
                   maxSpareThreads="75"
                   connectionTimeout="20000"
        ...

When you change the port in connector-configuration your Tomcat need a reboot.

A better way is to install a apache webserver in front. The Apache does handle SSL and proxy any permitted request to 127.0.0.1:8080 (HTTP only). Your firewall allow only port 443 for accessing from outside.


Best regards
MarC

[Gao Xiang]

hi marc

i change the port, it doesn't direct to jira.just tell me i can not access the folder.

can you tell me the details on how the Apache handle ssl.

thanks in advance.

[Harry Chan]

Hi, can you confirm if the firewall is open on port 443? I wouldn't really introduce Apache with just one instance. It introduces overhead for no reason.

The config MarC provided should work. Maybe you can post your server.xml if you've made other changes.

[Gao Xiang]

attached is the server.xml file.

kindly help me review.