Confluence and Nginx are separated servers, Companion App is not working.
Asked by Kohei Nishikawa:

No.1 : Confluence Server 6.13.0

No.2 : Confluence Server 6.14.1

![Atlassian Companion Apps check.png](/t5/image/serverpage/image-id/48231iE8B6C6CE628A5A5E/image-dimensions/699x198?v=v2 "Atlassian Companion Apps check.png")

I attempted to edit an attached file, but the application does not start with "Companion App". It is the environment No.2 in the above image.

![companion app not work.png](/t5/image/serverpage/image-id/48232iD6E4720392E44D98/image-dimensions/221x234?v=v2 "companion app not work.png")

After checking the "Companion app log" and comparing the log of No.1, it turned out that the processing beginning with \[{"namespace": "adc: file - manager"\] was not executed.

No.1   
Companion App log : I changed domain for questions.

```
{"namespace":"adc:websocket","date":"2019-03-06T09:23:53.553Z","message":["new client connection"]},
{"namespace":"adc:websocket","date":"2019-03-06T09:23:53.562Z","message":["received message:","{\"type\":\"authentication\",\"payload\":{\"provider\":\"server\",\"payload\":{\"siteTitle\":\"??Wiki\"}},\"requestID\":1}"]},
{"namespace":"adc:serverauth","date":"2019-03-06T09:23:53.566Z","message":["Found trusted domain in database:","wiki.example.test"]},
{"namespace":"adc:websocket","date":"2019-03-06T09:23:53.582Z","message":["received message:","{\"type\":\"new-transaction\",\"payload\":{\"transactionType\":\"file\"},\"requestID\":2}"]},
{"namespace":"adc:websocket","date":"2019-03-06T09:23:53.590Z","message":["received message:","{\"transactionID\":\"c026e126-3596-4380-b4dc-28b6c8bc9230\",\"type\":\"list-apps\",\"payload\":{\"extension\":\"docx\"},\"requestID\":3}"]},
{"namespace":"adc:websocket","date":"2019-03-06T09:23:53.596Z","message":["received transaction message for:","c026e126-3596-4380-b4dc-28b6c8bc9230"]},
{"namespace":"adc:transaction:c026e126-3596-4380-b4dc-28b6c8bc9230","date":"2019-03-06T09:23:53.602Z","message":["handling apps list request",{"extension":"docx"}]},
{"namespace":"adc:websocket","date":"2019-03-06T09:23:54.573Z","message":["received message:","{\"transactionID\":\"c026e126-3596-4380-b4dc-28b6c8bc9230\",\"type\":\"launch-file-in-app\",\"payload\":{\"fileURL\":\"https://wiki.example.test/confluence/download/attachments/4554777/praivacy-policy-sample.docx?version=2&modificationDate=1551859710733&api=v2&download=true&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJqd3Quc3ViamVjdC5jb25mbHVlbmNlLXByZXZpZXdzLnRlbXBsaW5rc3Jlc291cmNlIiwicXNoIjoiYWJkYTM2NzcxODZjZDVjOTQ4OWY2MTBlYjVhOTg4MGUwYTJmNGE4YWJmNGZiNjc5N2FiN2M1OGMwNmY4MWVhOCIsImlzcyI6ImNvbS5hdGxhc3NpYW4uY29uZmx1ZW5jZS5wbHVnaW5zLnByZXZpZXdzIiwiZXhwIjoxNTUxODY0Mjk2LCJpYXQiOjE1NTE4NjQyMzYsInVzZXJLZXkiOiIyYzlhODU4ODY3NzlmOTMzMDE2Nzc5ZmNkZWJmMDAwMiJ9.8F6hNO9iZbKPEJVgkaxxT9r6M-CzuJvy0NGRWfAA1TM\",\"applicationID\":\"1e8deda4dfa51a85684f43b79e2f89a9\",\"fileName\":\"praivacy-policy-sample.docx\",\"submitChangesURL\":\"\",\"autoUpload\":false},\"requestID\":4}"]},
{"namespace":"adc:websocket","date":"2019-03-06T09:23:54.579Z","message":["received transaction message for:","c026e126-3596-4380-b4dc-28b6c8bc9230"]},
{"namespace":"adc:transaction:c026e126-3596-4380-b4dc-28b6c8bc9230","date":"2019-03-06T09:23:54.584Z","message":["handling file launch request",{"fileURL":"https://wiki.example.test/confluence/download/attachments/4554777/praivacy-policy-sample.docx?version=2&modificationDate=1551859710733&api=v2&download=true&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJqd3Quc3ViamVjdC5jb25mbHVlbmNlLXByZXZpZXdzLnRlbXBsaW5rc3Jlc291cmNlIiwicXNoIjoiYWJkYTM2NzcxODZjZDVjOTQ4OWY2MTBlYjVhOTg4MGUwYTJmNGE4YWJmNGZiNjc5N2FiN2M1OGMwNmY4MWVhOCIsImlzcyI6ImNvbS5hdGxhc3NpYW4uY29uZmx1ZW5jZS5wbHVnaW5zLnByZXZpZXdzIiwiZXhwIjoxNTUxODY0Mjk2LCJpYXQiOjE1NTE4NjQyMzYsInVzZXJLZXkiOiIyYzlhODU4ODY3NzlmOTMzMDE2Nzc5ZmNkZWJmMDAwMiJ9.8F6hNO9iZbKPEJVgkaxxT9r6M-CzuJvy0NGRWfAA1TM","applicationID":"1e8deda4dfa51a85684f43b79e2f89a9","fileName":"praivacy-policy-sample.docx","submitChangesURL":"","autoUpload":false}]},
{"namespace":"adc:file-manager","date":"2019-03-06T09:23:54.701Z","message":["download length set at ",13552]},
{"namespace":"adc:analytics","date":"2019-03-06T09:23:54.717Z","message":["event","companion.openWith.request",{"appName":"Word","fileAttributes":{"fileSize":13552}},"b351c82e-4239-4313-a5a9-74aa698bbacd"]},
{"namespace":"adc:file-manager","date":"2019-03-06T09:23:54.736Z","message":["telling the OS to launch file:","C:\\Users\\user1\\.atlassian-companion\\9cdb542c-14c5-4ce0-9541-382c7d780cd6\\praivacy-policy-sample.docx"]},
{"namespace":"adc:file-manager","date":"2019-03-06T09:23:56.476Z","message":["Change reported, checking murmur for file:","9cdb542c-14c5-4ce0-9541-382c7d780cd6","Testing:","21ea71f5cacfb030dfca132ee11ea925"," vs ","21ea71f5cacfb030dfca132ee11ea925"]},
{"namespace":"adc:file-manager","date":"2019-03-06T09:23:56.496Z","message":["Murmur resulted in no-change, checking SHA fallback, Testing:","iPswUDFzHXsL3qAnfFISj9o9nLo=","vs ","iPswUDFzHXsL3qAnfFISj9o9nLo="]},
{"namespace":"adc:file-manager","date":"2019-03-06T09:23:56.502Z","message":["ignoring change"]}
```

No.2 (Companion app not work)  
Companion App log : I changed domain for questions.

```
{"namespace":"adc:websocket","date":"2019-03-06T07:58:08.329Z","message":["new client connection"]},
{"namespace":"adc:websocket","date":"2019-03-06T07:58:08.346Z","message":["received message:","{\"type\":\"authentication\",\"payload\":{\"provider\":\"server\",\"payload\":{\"siteTitle\":\"Sales Demo Confluence ??\"}},\"requestID\":1}"]},
{"namespace":"adc:serverauth","date":"2019-03-06T07:58:08.351Z","message":["Found trusted domain in database:","mkt.xxxdev.jp"]},
{"namespace":"adc:websocket","date":"2019-03-06T07:58:08.380Z","message":["received message:","{\"type\":\"new-transaction\",\"payload\":{\"transactionType\":\"file\"},\"requestID\":2}"]},
{"namespace":"adc:websocket","date":"2019-03-06T07:58:08.408Z","message":["received message:","{\"transactionID\":\"10e89ff0-9666-4246-a1da-ee45c494f3c6\",\"type\":\"list-apps\",\"payload\":{\"extension\":\"docx\"},\"requestID\":3}"]},
{"namespace":"adc:websocket","date":"2019-03-06T07:58:08.411Z","message":["received transaction message for:","10e89ff0-9666-4246-a1da-ee45c494f3c6"]},
{"namespace":"adc:transaction:10e89ff0-9666-4246-a1da-ee45c494f3c6","date":"2019-03-06T07:58:08.415Z","message":["handling apps list request",{"extension":"docx"}]},
{"namespace":"adc:websocket","date":"2019-03-06T07:58:09.613Z","message":["received message:","{\"transactionID\":\"10e89ff0-9666-4246-a1da-ee45c494f3c6\",\"type\":\"launch-file-in-app\",\"payload\":{\"fileURL\":\"https://mkt.xxxdev.jp/wiki2/download/attachments/5898291/%E3%82%B5%E3%83%B3%E3%83%95%E3%82%9A%E3%83%AB-WORD.docx?version=3&modificationDate=1511155525463&api=v2&download=true&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJqd3Quc3ViamVjdC5jb25mbHVlbmNlLXByZXZpZXdzLnRlbXBsaW5rc3Jlc291cmNlIiwicXNoIjoiZWE0NGNhOTYzYzliMGZkZTBjZTNiNjMzMmI4NjA4OTVlMWUyYmUwNzJiNzIwNjhjMTRkNGVmYjJjZTQ0N2YyZCIsImlzcyI6ImNvbS5hdGxhc3NpYW4uY29uZmx1ZW5jZS5wbHVnaW5zLnByZXZpZXdzIiwiZXhwIjoxNTUxODU5MTUxLCJpYXQiOjE1NTE4NTkwOTEsInVzZXJLZXkiOiIyYzlmODIyYzYyODRiMGQxMDE2Mjg1NmQ0OWJkMDAwMCJ9.esI-mWYfesntzzxUZYHRm3nnO-PDHsvnePJ5N0CE5Nw\",\"applicationID\":\"1e8deda4dfa51a85684f43b79e2f89a9\",\"fileName\":\"sample-WORD.docx\",\"submitChangesURL\":\"\",\"autoUpload\":false},\"requestID\":4}"]},
{"namespace":"adc:websocket","date":"2019-03-06T07:58:09.617Z","message":["received transaction message for:","10e89ff0-9666-4246-a1da-ee45c494f3c6"]},
{"namespace":"adc:transaction:10e89ff0-9666-4246-a1da-ee45c494f3c6","date":"2019-03-06T07:58:09.619Z","message":["handling file launch request",{"fileURL":"https://mkt.xxxdev.jp/wiki2/download/attachments/5898291/%E3%82%B5%E3%83%B3%E3%83%95%E3%82%9A%E3%83%AB-WORD.docx?version=3&modificationDate=1511155525463&api=v2&download=true&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJqd3Quc3ViamVjdC5jb25mbHVlbmNlLXByZXZpZXdzLnRlbXBsaW5rc3Jlc291cmNlIiwicXNoIjoiZWE0NGNhOTYzYzliMGZkZTBjZTNiNjMzMmI4NjA4OTVlMWUyYmUwNzJiNzIwNjhjMTRkNGVmYjJjZTQ0N2YyZCIsImlzcyI6ImNvbS5hdGxhc3NpYW4uY29uZmx1ZW5jZS5wbHVnaW5zLnByZXZpZXdzIiwiZXhwIjoxNTUxODU5MTUxLCJpYXQiOjE1NTE4NTkwOTEsInVzZXJLZXkiOiIyYzlmODIyYzYyODRiMGQxMDE2Mjg1NmQ0OWJkMDAwMCJ9.esI-mWYfesntzzxUZYHRm3nnO-PDHsvnePJ5N0CE5Nw","applicationID":"1e8deda4dfa51a85684f43b79e2f89a9","fileName":"sample-WORD.docx","submitChangesURL":"","autoUpload":false}]}
```

Do you have any ideas ?  
Best regards,


Answers:
author: Diego
body: Hello there! Thanks for reaching to the Community.

As I understand, the Companion App does not run when Confluence is behind NGINX with Crowd SSO and a client certificate is that correct?

Since these two environments are quite different, we might need to try and copy the working one and adapt it so it can have the final intended setup.
> 1. Are you able to **replicate your working environment**and implement SSO on it?
> 2. What happens if you try to **set your proxy in another server** in your working environment?
> 3. Has this worked at some point in the past?
> 4. Would it be possible for you to setup a **copy of your working environment** and perform tests on it?
> 5. Is the working environment your production one?

The initial idea is as follows:
> * Create a copy of your working environment
> * Check if everything works in your copy
> * Move the NGINX proxy to another server
> * Check if everything is still working
> * Implement SSO
> * Check if everything is working again
> * Upgrade Confluence to 6.14.1
> * Check if everything is working once more

Also, you may want to take a look into our documentation about this:

**[Cloud Server 6.14 Administering the Atlassian Companion App - Proxy and SSL considerations](https://confluence.atlassian.com/doc/administering-the-atlassian-companion-app-958456281.html#AdministeringtheAtlassianCompanionApp-ProxyandSSLconsiderations)**

[**Running Confluence behind NGINX with SSL**](https://confluence.atlassian.com/doc/running-confluence-behind-nginx-with-ssl-858772080.html)

Let us know about your results and answers Kohei! Looking forward to your reply.

comments: author: Akira Higuchi
body: Hi, Diego

My name is Akira Higuchi, I'm working with Kohei. Thank you for your support and helpful information.  
For security reason, Our nginx is checking the verification of the client certificate with a ssl_verify_client option. The client certificate is working well with the web browser, but not well with Atlassian Companion App. We had confirmed that office application started after disabling ssl_verify_client option. I will check about the suggestion in JAC. If I can't find it, I will raise an issue since ssl_verify_client is very important for us.


Tags: companion-app

confluence-server

server