[精讚] [會員登入]
86

setup jira run under build-in tomcat web server with https

setup jira run under native tomcat web server with https

分享此文連結 //n.sfs.tw/15823

分享連結 setup jira run under build-in tomcat web server with https@der amateur
(文章歡迎轉載,務必尊重版權註明連結來源)
2023-09-07 22:30:23 最後編修
2022-05-08 13:19:07 By
 

in order to solve HTTPS behind reverse proxy causing Atlassian marketplace redirecting incapability issue,

our team leader decided to run Jira build-in tomcat web server directly.

here are the noting processes as a reminder,

first, Jira 7.6.1 provided a native configuration tool including CLI and GUI based on JAVA 8,

if you want to run it, alter the java version to 1.8 exactly, I tried JAVA 11, but not working.

and you need to set JAVA_HOME in your profile, before running the configuration tool.

then source your profile every time you run it.

profile settings under /etc/profile.d/java.sh

export JAVA_HOME=/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.322.b06-1.el7_9.x86_64/jre
export JAVA_PATH=$JAVA_HOME
export PATH=$PATH:$JAVA_HOME/bin

 

second, prepare SSL certification files, including both p12 and jks

import them using keytool into java secure library

third, run configuration tool under CLI,

if you wishing to run under GUI, you'll have to allow SSH X11 forwarding,

I ended up setting X authority file utility

references:

https://www.cyberciti.biz/faq/how-to-fix-x11-forwarding-request-failed-on-channel-0/

https://www.wongwonggoods.com/linux/linux-x11-forward/

I set up X11UseLocalhost to no with xauth yum package.

but CLI is good enough

following this manual: https://confluence.atlassian.com/adminjiraserver073/running-jira-applications-over-ssl-or-https-861253906.html

then goes to your jira installation location, in my case, at /opt/atlassian/jir/

finds server.xml under the conf folder,

you'll need to modify a package name or the Jira won't be able to startup,

inside your server.xml about <Connector> settings,

fix this:

protocol="org.apache.coyote.http11.Http11Protocol"

to this:

protocol="org.apache.coyote.http11.Http11NioProtocol"

you're done on running jira with build-in tomcat web server.

next is to import ssl certification into jira java keystore

jks and p12 type of file are needed

if you do not have these two certificate files, do steps as following first,

cat root.cer uca.cer > all.crt
###add privatekey to generate p12 formate encryption
openssl pkcs12 -export -chain -in server.cer -inkey privatekey.key -out jira2019.p12 -name jira2019 -CAfile all.crt
###using p12 to generate jks formate
/opt/atlassian/jira/jre/bin/keytool -importkeystore -destkeystore /opt/atlassian/jira/jre/lib/security/jira2019.jks -srckeystore jira2019.p12 -alias jira2019
 
steps above had import jks into keystore, do not need to execute steps belows.
 
or if you had them already,

#keytool -importkeystore -destkeystore /path/to/jira.jks -srckeystore /path/to/jira.p12 -alias jira

but java will complain about type of key, you'll have to transfer jks as pkcs12

#keytool -importkeystore -srckeystore /path/to/jira.jks -destkeystore /path/to/jira.jks -deststoretype pkcs12

then restart jira, that's all.

 

END

你可能感興趣的文章

setup jira run under build-in tomcat web server with https setup jira run under native tomcat web server with https

<<此文不開放留言>>

隨機好文

how to install teamviewer on ubuntu linux 18.04 LTS install teamviewer by using deb file

JIRA instance migration phase2: install node.js and chinese fonts install node.js to export PDF though BigPicture plugin

JAVA Maximum Length Difference You are given two arrays a1 and a2 of strings. Each string i