Unable to download Jira upgrade due to credentials prompt on downloads.atlassian.com

[Martijn Heemels]

I want to upgrade my Jira installation from 5.0 to 5.1 and therefore need to download the installer. I've been trying this since last week but I always get prompted for credentials, which don't work. I waited a few days for someone to notice, but today the problem remains. Please help.

At https://www.atlassian.com/software/jira/download I click the Linux tab and click Current Customers: Download Here next to the version I want (i.e. JIRA 5.1.4 (Linux 64 Bit Installer)).

I'm then linked to another page that says Thanks for downloading JIRA! and prompts me for a credentials to access https://downloads.atlassian.com. Frustratingly, none of my Atlassian.com credentials I've tried for the last few days are accepted. So, eventually I click cancel and get dumped to a plain Apache 401 Authorization Required page.

Even if I try to pretend I'm not a current customer and try to download a trial do I get the same treatment.

What's going on?

Regards, Martijn Heemels

[Martijn Heemels · Accepted solution]

It turns out the culprit is the HTTPS Everywhere add-on for Firefox (https://www.eff.org/https-everywhere). It prefers HTTPS over HTTP, if available. This works fine on www.atlassian.com, but breaks on downloads.atlassian.com. Most likely, the downloads.atlassian.com server has a virtualhost that does respond to HTTPS requests, but is configured to require authentication, unlike the HTTP virtualhost.

With the add-on enabled, Firefox gets redirected from https://www.atlassian.com/software/jira/downloads/binary/atlassian-jira-5.1.3-x64.bin to https://my.atlassian.com/software/jira/downloads/binary/atlassian-jira-5.1.3-x64.bin then to https://download.atlassian.com/software/jira/downloads/binary/atlassian-jira-5.1.3-x64.bin at which point it shows the prompt. You can reproduce by visiting this last URL in any browser.

With the add-on disabled, the last redirect becomes http://downloads.atlassian.com/software/jira/downloads/atlassian-jira-5.1.3-x64.bin (no https!) which redirects to an edgacastcdn.net URL, which finally sends the binary. This manages to download just fine.

I've notified Atlassian, and they've created an internal ticket to see if they can fix this on their end. In the meantime, I've added an exception rule to my HTTPS Everywhere add-on.

[Nic Brough -Adaptavist-]

I'm not sure what the problem might be on your attempts, but I can download with or without logging in.

Could you go to https://www.atlassian.com/software/jira/download?os=linux select the right OS, and then right-click on the big green "trial download" and select "copy url". Paste that straight into a browser and see what happens.

Also, what happens if you log in to "my account"? Do you have an account yet? If you do, then do you get in ok?