Securing Bitbucket Server with Tomcat using SSL
This page describes how to enable HTTPS (HTTP over SSL) access for Apache Tomcat, the application server shipped with Bitbucket Server.
Why should I secure Bitbucket using SSL?
You should consider doing this, and making secure access mandatory, if Bitbucket Server will be internet-facing, which could potentially put usernames, passwords and other proprietary data at risk.
There are other network topology options for running Bitbucket Server, including running Bitbucket Server behind a reverse proxy. For an overview of some common options, see Proxying and securing Bitbucket Server.
When Bitbucket Server is set up using these instructions, access to Bitbucket Server is direct, and all communication between a user's browser and Bitbucket Server will be secured using SSL.
はじめる前に
The configuration described here results in a scenario where:
- Bitbucket Server would listen for requests on port
8443
; the port can be changed, if required. - Bitbucket Server would be available at
https://<computer name>:8443
; the base URL can be changed, if required. - As a result, any existing links with other applications would need to be reconfigured using this new URL for Bitbucket Server.
- You can set the context path for Bitbucket Server if you are running another Atlassian application, or Java web application, at the same hostname and context path as Bitbucket Server.
- Securing Git operations between the user's computer and Bitbucket Server is a separate consideration - see Enabling SSH access to Git.
These instructions are for reference use only
Atlassian applications allow the use of SSL within our products, however Atlassian Support does not provide assistance for configuring it. Consequently, Atlassian cannot guarantee providing any support for it.
If you require assistance with conversions of certificates is required, consult the vendor who provided the certificate. Atlassian Support will refer SSL-related support to the issuing authority for the certificate.
Also, these instructions are intended for administrators setting up Bitbucket Server for a small team.