Symptoms

After configuring Crowd to use SSL and starting the service up, Crowd does not listen on the port configured in server.xml. Trying to access crowd using https in a browser fails. There are also no errors in Catalina.out or in atlassian-crowd.log.

Cause

The SSL connector property in server.xml is not inside of the </service> tag. Ex.

<?xml version="1.0" encoding="UTF-8"?>
<Server port="8020" shutdown="SHUTDOWN">
    <Service name="Catalina">
        <Connector acceptCount="100" connectionTimeout="20000" disableUploadTimeout="true" enableLookups="false" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" port="8095" redirectPort="8445" useBodyEncodingForURI="true" URIEncoding="UTF-8"/>
        <Engine defaultHost="localhost" name="Catalina">
            <Host appBase="webapps" autoDeploy="true" name="localhost" unpackWARs="true"/>
        </Engine>
        <!-- To connect to an external web server (typically Apache) -->
        <!-- Define an AJP 1.3 Connector on port 8009 -->
        <!--
            <Connector port="8009" enableLookups="false" redirectPort="8443" protocol="AJP/1.3" />
        -->
    </Service>
    <!-- Security listener. Documentation at /docs/config/listeners.html
    <Listener className="org.apache.catalina.security.SecurityListener" />
    -->
    <!--APR library loader. Documentation at /docs/apr.html -->
    <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
    <!--Initialize Jasper prior to webapps are loaded. Documentation at /docs/jasper-howto.html -->
    <Listener className="org.apache.catalina.core.JasperListener" />
    <!-- Prevent memory leaks due to use of particular java/javax APIs-->
    <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
    <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
    <Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" />

<Connector port="8445" maxHttpHeaderSize="8192" maxThreads="150"
minSpareThreads="25" maxSpareThreads="75" enableLookups="false"
disableUploadTimeout="true" acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" SSLEnabled="true" keystoreFile="/var/crowd-home/.keystore" />
</Server>

Resolution

• Edit server.xml to put the SSL connector inside of the </service tag> as shown below:

• <?xml version="1.0" encoding="UTF-8"?>
  <Server port="8020" shutdown="SHUTDOWN">
      <Service name="Catalina">
          <Connector acceptCount="100" connectionTimeout="20000" disableUploadTimeout="true" enableLookups="false" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" port="8095" redirectPort="8445" useBodyEncodingForURI="true" URIEncoding="UTF-8"/>
          <Engine defaultHost="localhost" name="Catalina">
              <Host appBase="webapps" autoDeploy="true" name="localhost" unpackWARs="true"/>
          </Engine>
          <!-- To connect to an external web server (typically Apache) -->
          <!-- Define an AJP 1.3 Connector on port 8009 -->
          <!--
              <Connector port="8009" enableLookups="false" redirectPort="8443" protocol="AJP/1.3" />
          -->
   
  <Connector port="8445" maxHttpHeaderSize="8192" maxThreads="150"
  minSpareThreads="25" maxSpareThreads="75" enableLookups="false"
  disableUploadTimeout="true" acceptCount="100" scheme="https" secure="true"
  clientAuth="false" sslProtocol="TLS" SSLEnabled="true" keystoreFile="/var/crowd-home/.keystore" />
  
      </Service>
      <!-- Security listener. Documentation at /docs/config/listeners.html
      <Listener className="org.apache.catalina.security.SecurityListener" />
      -->
      <!--APR library loader. Documentation at /docs/apr.html -->
      <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
      <!--Initialize Jasper prior to webapps are loaded. Documentation at /docs/jasper-howto.html -->
      <Listener className="org.apache.catalina.core.JasperListener" />
      <!-- Prevent memory leaks due to use of particular java/javax APIs-->
      <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
      <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
      <Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" />
  </Server>