Stash HTTPS request is redirecting back to HTTP URL during application links creation
プラットフォームについて: Server および Data Center のみ。この記事は、Server および Data Center プラットフォームのアトラシアン製品にのみ適用されます。
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Fisheye および Crucible は除く
問題
When try to create an Application Links to JIRA, a timed out error message shows up in background and saw this Javascript error message in the browser console:
Mixed content: The page at 'https://stash-url' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://stash-url'. This request has been blocked; the content must be served over HTTPS.
診断
環境
- Nginx running on JIRA and Stash.
原因
ProxyName, ProxyPort and scheme parameters is not configured in the Stash server.xml file or the parameters are configured in the wrong directory due to the Stash latest changes:
| リリース | ディレクトリ |
|---|---|
| Stash 3.7 and earlier | <Stash installation directory>/conf/server.xml |
| Stash 3.8 and later | <Stash home directory>/shared/server.xml |
Reference from Stash upgrade guide.ソリューション
Add 'ProxyName', 'ProxyPort' and 'scheme' parameters in the Stash server.xml. For more details information, please refer Securing Stash behind nginx using SSL article.