Artifactory 7.63.11 HTTPS配置后/ui路径404问题求助

问题分析 #

HTTP访问正常，但HTTPS访问https://myhost:8443/artifactory重定向到/ui/时出现404，核心原因是Artifactory 7.x的UI由Access服务提供，你仅配置了Artifactory主服务的HTTPS连接器，未对Access服务做HTTPS配置，同时未指定Artifactory的HTTPS基础URL，导致重定向逻辑异常。

解决方案 #

1. 补充Access服务的HTTPS配置 #

修改system.yaml，在access.tomcat节点下添加httpsConnector配置，使用与Artifactory相同的证书文件：

access:
    http:
        port: 8040
    tomcat:
        connector:
            maxThreads: 50
            sendReasonPhrase: true
        httpsConnector:
            enabled: true
            port: 8443
            certificateFile: "/opt/artifactory-oss-7.63.11/var/etc/artifactory/security/ssl/server.crt"
            certificateKeyFile: "/opt/artifactory-oss-7.63.11/var/etc/artifactory/security/ssl/server.key"
            extraConfig: 'SSLProtocol="TLSv1.2"'

2. 指定Artifactory的HTTPS基础URL #

在artifactory节点下添加baseUrl配置，让系统明确HTTPS访问的根路径：

artifactory:
    port: 8081
    baseUrl: https://myhost:8443/artifactory
    tomcat:
        connector:
            maxThreads: 200
            sendReasonPhrase: true
            relaxedPathChars: '"[]"'
            relaxedQueryChars: '"[]"'
        httpsConnector:
            enabled: true
            port: 8443
            certificateFile: "/opt/artifactory-oss-7.63.11/var/etc/artifactory/security/ssl/server.crt"
            certificateKeyFile: "/opt/artifactory-oss-7.63.11/var/etc/artifactory/security/ssl/server.key"
            extraConfig: 'SSLProtocol="TLSv1.2"'

3. 验证证书文件权限 #

确保Artifactory运行用户（通常为artifactory）对证书和密钥文件有读取权限：

chown artifactory:artifactory /opt/artifactory-oss-7.63.11/var/etc/artifactory/security/ssl/server.crt
chown artifactory:artifactory /opt/artifactory-oss-7.63.11/var/etc/artifactory/security/ssl/server.key
chmod 600 /opt/artifactory-oss-7.63.11/var/etc/artifactory/security/ssl/server.key

4. 重启Artifactory并验证 #

systemctl restart artifactory

重启后访问https://myhost:8443/artifactory，应正常重定向到HTTPS的UI登录页面。

额外检查点 #

如果问题仍存在，查看Access服务日志（路径通常为/opt/artifactory-oss-7.63.11/var/log/access/access.log），排查是否有HTTPS连接器初始化相关的报错。

内容的提问来源于stack exchange，提问作者KVR