[TIME-178] JSON data does not load when SSL is offloaded by Apache and the connection passed through as cleartext.

[Andriy Zhdanov]

I have offloaded SSL to Apache via these instructions:

http://confluence.atlassian.com/display/JIRA/Integrating+JIRA+with+Apache+using+SSL

I followed the section labelled "Alternative configuration if HTTPS is terminated on the proxy server"

Whether I access it via http or https with this configuration enabled, the JSON data will not load. Removing the https configuration and using plaintext http end-to-end fixes the issue.

The response payload contains the following: (I've redacted a lot of detail, but hopefully haven't neglected to include anything important.)

throw 1; < don't be evil' >{"https://example.com/rest/timesheet-gadget/1.0/timesheet.json?targetUser=&numOfWeeks=2&reportingDay=2":{"headers":{},"oauthError":"BAD_OAUTH_CONFIGURATION","body":"","oauthErrorText":"Failed to retrieve OAuth URLs, spec for gadget https://example.com/rest/gadgets/1.0/g/jira-timesheet-plugin:timesheet-gadget/gadget.xml does not contain OAuth element.\n\n==== Original request:\nGET /rest/timesheet-gadget/1.0/timesheet.json?targetUser=&numOfWeeks=2&reportingDay=2\n\nHost: example.com\nX-Shindig-AuthType: oauth\nX-Seraph-Trusted-App-Cert: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX\nX-Seraph-Trusted-App-ID: XXXXXXXXXXXXXXXXXX\nX-Seraph-Trusted-App-Key: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX\nX-shindig-dos: on\n\n\n====","st":"atlassian:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX","rc":403}}

Please let me know if I can provide any more information.

By smangelsdorf/Shaun Mangelsdorf on Mon, 19 Sep 2011 16:33:48 -0700

[Andriy Zhdanov]

I'm using JIRA 4.4, by the way.

By smangelsdorf on Mon, 19 Sep 2011 16:37:22 -0700

[Andriy Zhdanov]

Hi there, i had similar problem

• my jira runs on port 8443
• i have iptables redirection to port 433

-A PREROUTING -d 192.168.0.75 -p tcp -m tcp --dport 443 -j DNAT --to-destination 192.168.0.75:8443

• (i have also an apache redirection port 80 to 443 but this is not important here)

and:

• https://jira.mycompany.com:8443 -> works fine
• https://jira.mycompany.com -> "oauthError":"BAD_OAUTH_CONFIGURATION" problem

to solve this problem i manually change files: gadget.xml, group-timesheet-gadget.xml, project-pivot-gadget.xml (which are inside jar)
line:

baseUrl: "__ATLASSIAN_BASE_URL__",

to

baseUrl: "https://jira.mycompany.com:8443",

files are in plugin jar file

{JIRA_HOME_DIR}/plugins/installed-plugins/plugin.1687276535048574662.jira-timesheet-plugin-2.2.5.jar

you can use mc or other program to enter inside jar file and edit these files

hope this will help you

–
cheers
Marcin Cabaj

By marcin.cabaj on Wed, 7 Dec 2011 13:14:19 -0800