Re: Jira 4.3.4 will not start with https

[email protected] Tue, 12 Jul 2011 09:43:08 CDT
Newsgroups gmane.comp.java.jira.user
Message-ID <7869674.797941310481818490.JavaMail.j2ee_forums.atlassian.com@atlassian12.managed.contegix.com>
naturalbb82,

My apologies, I'm not familiar with the setup of Catalina from the XML configuration file.  I've had to do SSL certificates for an ISP I used to run years ago, and that's the knowledge base I'm to help you from.  

If you bought a certificate from Verisign, or one of the other providers, the root certificate should be taken care of.  If you are doing everything in-house, then things get a little more complex.  

Basically, most browsers know of a number of root certificate providers, so that the certificate validitiy can be traced.  If you generate your own root certificate, then the SSL protocol will trace to that, and the browsers will complain that it's "unknown", and then ask the user to approve/disapprove, with the recommendation to disapprove.  

The big-corporate way around this is to update the browsers with the internal root certificate, while providing the appropriate infrastructure.  I don't think you're in this category, though.  

Essentially the real use for generating your own certificate chains is to assist in developing your application and keeping cost contined during the development cycle.  Once you deploy, though, you'll need to have all the SSL certificates worked out.  The cost is small, depending on the provider you use.  The time cost to get the first certificate is generally 8 to 16 hours of your time, though, as you are finding out.  

Try looking up one of the web tutorials on SSL?  Or, maybe [This|http://en.wikipedia.org/wiki/SSL_Certificate] Wikipedia page will be useful?

Sorry I can't be more helpful.  

Scott
--
Post by [email protected] - online at:
http://forums.atlassian.com/thread.jspa?forumID=46&threadID=55176
_______________________________________________
Jira-user mailing list
[email protected]
To unsubscribe or change your options visit this page:
http://lists.atlassian.com/mailman/listinfo/jira-user