confluence on https
Asked by jimoyong:

I have had followed the guide : <https://confluence.atlassian.com/conf61/running-confluence-over-ssl-or-https-877188632.html> for several times, but it didn't work.

I haved tried to make the ca fullname to

IP

IP:8090

IP:8443

but none of then get works.

every time I goes to step 4, and change the http://IP:8090 to https://IP:8443

<br />

then save, log out, restart confluence, open a new tab on my browser, connect to https://IP:8443, it will keep loading for a long long long time.Then nothing on it.

And when I go to http://IP:8090 it can still give me the log in page.

Please help me to solve it, thank you very much!


Answers:
author: AnnWorley
body: To help us get started, please paste your server.xml in a code block

```
(using the < > in the toolbar)
```

Make sure and omit the **keystorePass** value, of course.

It will also help to look in the logs to see if there is an error when you try accessing over SSL:

* \<confluence_install\>/logs/catalina.out
* \<confluence_home\>/logs/atlassian-confluence.log
  * The \<confluence_home\> directory is the path defined in the following file: \<confluence_install\>/confluence/WEB-INF/classes/confluence-init.properties

comments: author: jimoyong
body: Thank you for your reply!

the server.xml:

```
<Server port="8000" shutdown="SHUTDOWN" debug="0">    <Service name="Tomcat-Standalone">        <Connector port="8090" connectionTimeout="20000" redirectPort="8443"                maxThreads="48" minSpareThreads="10"                enableLookups="false" acceptCount="10" debug="0" URIEncoding="UTF-8"                protocol="org.apache.coyote.http11.Http11NioProtocol" />        <Engine name="Standalone" defaultHost="localhost" debug="0">            <Host name="localhost" debug="0" appBase="webapps" unpackWARs="true" autoDeploy="false" startStopThreads="4">                <Context path="" docBase="../confluence" debug="0" reloadable="false" useHttpOnly="true">                    <!-- Logger is deprecated in Tomcat 5.5. Logging configuration for Confluence is specified in confluence/WEB-INF/classes/log4j.properties -->                    <Manager pathname="" />                    <Valve className="org.apache.catalina.valves.StuckThreadDetectionValve" threshold="60" />                </Context>                <Context path="${confluence.context.path}/synchrony-proxy" docBase="../synchrony-proxy" debug="0" reloadable="false" useHttpOnly="true">                    <Valve className="org.apache.catalina.valves.StuckThreadDetectionValve" threshold="60" />                </Context>            </Host>        </Engine>        <!--            To run Confluence via HTTPS:             * Uncomment the Connector below             * Execute:                 %JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA (Windows)                 $JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA  (Unix)               with a password value of "changeit" for both the certificate and the keystore itself.             * Restart and visit https://localhost:8443/             For more info, see https://confluence.atlassian.com/display/DOC/Running+Confluence+Over+SSL+or+HTTPS        -->        <Connector port="8443" maxHttpHeaderSize="8192"                   maxThreads="150" minSpareThreads="25"                   protocol="org.apache.coyote.http11.Http11NioProtocol"                   enableLookups="false" disableUploadTimeout="true"                   acceptCount="100" scheme="https" secure="true"                   clientAuth="false" sslProtocols="TLSv1,TLSv1.1,TLSv1.2" sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2" SSLEnabled="true"                   URIEncoding="UTF-8" keystorePass=MYPWD                   keystoreFile="/root/.keystore"/>    </Service></Server>
```


author: jimoyong
body: the catalina.out:

```
25-May-2017 11:27:09.647 INFO [main] org.apache.catalina.startup.Catalina.load Initialization processed in 652 ms25-May-2017 11:27:09.653 INFO [main] org.apache.catalina.core.StandardService.startInternal Starting service Tomcat-Standalone25-May-2017 11:27:09.653 INFO [main] org.apache.catalina.core.StandardEngine.startInternal Starting Servlet Engine: Apache Tomcat/8.0.4125-May-2017 11:27:10.917 INFO [localhost-startStop-2] org.apache.catalina.core.ApplicationContext.log Spring WebApplicationInitializers detected on classpath: [com.atlassian.synchrony.proxy.SynchronyDispatcherServletInitializer@2f9f0cfa]2017-05-25 11:27:11,244 INFO [localhost-startStop-1] [com.atlassian.confluence.lifecycle] contextInitialized Starting Confluence 6.1.3 [build 7109 based on commit hash fbbcac5a2a6382e2f6a78d491af75161a7840bc8] - synchrony version 0.3.1-release-confluence_6.1-e20fb9442017-05-25 11:27:13,533 INFO [localhost-startStop-1] [atlassian.confluence.cluster.DefaultClusterConfigurationHelper] lambda$populateExistingClusterSetupConfig$1 Populating setup configuration if running with Cluster mode...25-May-2017 11:29:07.173 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin [SetPropertiesRule]{Server} Setting property 'debug' to '0' did not find a matching property.25-May-2017 11:29:07.300 WARNING [main] org.apache.catalina.startup.SetAllPropertiesRule.begin [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'debug' to '0' did not find a matching property.25-May-2017 11:29:07.318 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin [SetPropertiesRule]{Server/Service/Engine} Setting property 'debug' to '0' did not find a matching property.25-May-2017 11:29:07.326 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin [SetPropertiesRule]{Server/Service/Engine/Host} Setting property 'debug' to '0' did not find a matching property.25-May-2017 11:29:07.407 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin [SetPropertiesRule]{Server/Service/Engine/Host/Context} Setting property 'debug' to '0' did not find a matching property.25-May-2017 11:29:07.438 WARNING [main] org.apache.tomcat.util.digester.SetPropertiesRule.begin [SetPropertiesRule]{Server/Service/Engine/Host/Context} Setting property 'debug' to '0' did not find a matching property.25-May-2017 11:29:07.442 WARNING [main] org.apache.catalina.startup.SetAllPropertiesRule.begin [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'sslProtocols' to 'TLSv1,TLSv1.1,TLSv1.2' did not find a matching property.25-May-2017 11:29:07.970 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["http-nio-8090"]25-May-2017 11:29:08.016 INFO [main] org.apache.tomcat.util.net.NioSelectorPool.getSharedSelector Using a shared selector for servlet write/read25-May-2017 11:29:08.019 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["http-nio-8443"]25-May-2017 11:29:08.537 SEVERE [main] org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore Failed to load keystore type JKS with path /root/.keystore due to /root/.keystore (Permission denied) java.io.FileNotFoundException: /root/.keystore (Permission denied)    at java.io.FileInputStream.open0(Native Method)    at java.io.FileInputStream.open(FileInputStream.java:195)    at java.io.FileInputStream.<init>(FileInputStream.java:138)    at java.io.FileInputStream.<init>(FileInputStream.java:93)    at sun.net.www.protocol.file.FileURLConnection.connect(FileURLConnection.java:90)    at sun.net.www.protocol.file.FileURLConnection.getInputStream(FileURLConnection.java:188)    at org.apache.tomcat.util.file.ConfigFileLoader.getInputStream(ConfigFileLoader.java:96)    at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:442)    at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:353)    at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:606)    at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:546)    at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:371)    at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:810)    at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:476)    at org.apache.coyote.http11.AbstractHttp11JsseProtocol.init(AbstractHttp11JsseProtocol.java:120)    at org.apache.catalina.connector.Connector.initInternal(Connector.java:960)    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)    at org.apache.catalina.core.StandardService.initInternal(StandardService.java:568)    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)    at org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:871)    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)    at org.apache.catalina.startup.Catalina.load(Catalina.java:580)    at org.apache.catalina.startup.Catalina.load(Catalina.java:603)
```

while the ls -l of .keystore:

```
~# ls -l /root/.keystore -rwxrwxrwx 1 root root 2258 May 25 10:34 /root/.keystore
```


author: Martin Sykora
body: Hi. I am having the same issue. Did you eventually find out what the problem was?


author: jimoyong
body: You can try these:

1 put the keystore file to the home path of confluence. for example /xxx/.keystore (home path is /xxx/opt).

2 regenerate the keystore file.

hope it can help you.


Tags: https