exist-development

[Exist-development] SSL for Jetty under trunk

[Loren C. <lor...@gm...>]

Since we upgraded to Jetty 7, the information for enabling SSL has disappeared from the jetty configuration file.  I found jetty-ssl.xml in a download of the current release of Jetty.  Shall we add an option to look at the jetty-ssl.xml file as well as jetty.xml, or just add the contents of the jetty-ssl.xml file to the jetty.xml file?

Below is the contents of the jetty-ssl.xml file:

<?xml version="1.0"?>
<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure.dtd">

<!-- =============================================================== -->
<!-- Configure SSL for the Jetty Server                              -->
<!-- this configuration file should be used in combination with      -->
<!-- other configuration files.  e.g.                                -->
<!--    java -jar start.jar etc/jetty.xml etc/jetty-ssl.xml          -->
<!-- =============================================================== -->
<Configure id="Server" class="org.eclipse.jetty.server.Server">

  <!-- if NIO is not available, use org.eclipse.jetty.server.ssl.SslSocketConnector -->

  <Call name="addConnector">
    <Arg>
      <New class="org.eclipse.jetty.server.ssl.SslSelectChannelConnector">
	<Set name="Port">8443</Set>
	<Set name="maxIdleTime">30000</Set>
        <Set name="Acceptors">2</Set>
        <Set name="AcceptQueueSize">100</Set>
	<Set name="Keystore"><SystemProperty name="jetty.home" default="." />/etc/keystore</Set>
	<Set name="Password">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
	<Set name="KeyPassword">OBF:1u2u1wml1z7s1z7a1wnl1u2g</Set>
        <Set name="truststore"><SystemProperty name="jetty.home" default="." />/etc/keystore</Set>
        <Set name="trustPassword">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
      </New>
    </Arg>
  </Call>
</Configure>

Loren

Re: [Exist-development] SSL for Jetty under trunk

[Dmitriy S. <sha...@gm...>]

Loren,

Better keep them separate & add  

<!-- ============================================================== --> 
<!-- Configure SSL for the Jetty Server                             --> 
<!-- this configuration file should be used in combination with     --> 
<!-- other configuration files.  e.g.                               --> 
<!--    java -jar start.jar etc/jetty.xml etc/jetty-ssl.xml         --> 
<!-- ============================================================== --> 

to jetty.xml as information how enable it.

-- 
Cheers,

Dmitriy Shabanov

On Mon, 2010-03-29 at 18:55 -0500, Loren Cahlander wrote:
> Since we upgraded to Jetty 7, the information for enabling SSL has
> disappeared from the jetty configuration file.  I found jetty-ssl.xml
> in a download of the current release of Jetty.  Shall we add an option
> to look at the jetty-ssl.xml file as well as jetty.xml, or just add
> the contents of the jetty-ssl.xml file to the jetty.xml file?
> 
> 
> Below is the contents of the jetty-ssl.xml file:
> 
> 
>         <?xml version="1.0"?>
>         <!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN"
>         "http://www.eclipse.org/jetty/configure.dtd">
>         
>         
>         <!--
>         =============================================================== -->
>         <!-- Configure SSL for the Jetty Server
>         -->
>         <!-- this configuration file should be used in combination
>         with      -->
>         <!-- other configuration files.  e.g.
>         -->
>         <!--    java -jar start.jar etc/jetty.xml etc/jetty-ssl.xml
>         -->
>         <!--
>         =============================================================== -->
>         <Configure id="Server"
>         class="org.eclipse.jetty.server.Server">
>         
>         
>           <!-- if NIO is not available, use
>         org.eclipse.jetty.server.ssl.SslSocketConnector -->
>         
>         
>           <Call name="addConnector">
>             <Arg>
>               <New
>         class="org.eclipse.jetty.server.ssl.SslSelectChannelConnector">
>         <Set name="Port">8443</Set>
>         <Set name="maxIdleTime">30000</Set>
>                 <Set name="Acceptors">2</Set>
>                 <Set name="AcceptQueueSize">100</Set>
>         <Set name="Keystore"><SystemProperty name="jetty.home"
>         default="." />/etc/keystore</Set>
>         <Set
>         name="Password">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
>         <Set name="KeyPassword">OBF:1u2u1wml1z7s1z7a1wnl1u2g</Set>
>                 <Set name="truststore"><SystemProperty
>         name="jetty.home" default="." />/etc/keystore</Set>
>                 <Set
>         name="trustPassword">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
>               </New>
>             </Arg>
>           </Call>
>         </Configure>

Re: [Exist-development] SSL for Jetty under trunk

[Loren C. <lor...@gm...>]

The problem with that, is that the exist startup uses the following in org.exist.start.Main:

                String config;
                if (_mode.equals("jetty"))
                    config = "jetty.xml";
                else
                    config = "standalone.xml";
                args = new String[]{ System.getProperty("jetty.home") + File.separatorChar + "etc"
                        + File.separatorChar + config };

There currently is no option to specify any additional jetty configuration files.

On Mar 29, 2010, at 11:55 PM, Dmitriy Shabanov wrote:

> Loren,
> 
> Better keep them separate & add  
> 
> <!-- ============================================================== --> 
> <!-- Configure SSL for the Jetty Server                             --> 
> <!-- this configuration file should be used in combination with     --> 
> <!-- other configuration files.  e.g.                               --> 
> <!--    java -jar start.jar etc/jetty.xml etc/jetty-ssl.xml         --> 
> <!-- ============================================================== --> 
> 
> to jetty.xml as information how enable it.
> 
> -- 
> Cheers,
> 
> Dmitriy Shabanov
> 
> On Mon, 2010-03-29 at 18:55 -0500, Loren Cahlander wrote:
>> Since we upgraded to Jetty 7, the information for enabling SSL has
>> disappeared from the jetty configuration file.  I found jetty-ssl.xml
>> in a download of the current release of Jetty.  Shall we add an option
>> to look at the jetty-ssl.xml file as well as jetty.xml, or just add
>> the contents of the jetty-ssl.xml file to the jetty.xml file?
>> 
>> 
>> Below is the contents of the jetty-ssl.xml file:
>> 
>> 
>>        <?xml version="1.0"?>
>>        <!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN"
>>        "http://www.eclipse.org/jetty/configure.dtd">
>> 
>> 
>>        <!--
>>        =============================================================== -->
>>        <!-- Configure SSL for the Jetty Server
>>        -->
>>        <!-- this configuration file should be used in combination
>>        with      -->
>>        <!-- other configuration files.  e.g.
>>        -->
>>        <!--    java -jar start.jar etc/jetty.xml etc/jetty-ssl.xml
>>        -->
>>        <!--
>>        =============================================================== -->
>>        <Configure id="Server"
>>        class="org.eclipse.jetty.server.Server">
>> 
>> 
>>          <!-- if NIO is not available, use
>>        org.eclipse.jetty.server.ssl.SslSocketConnector -->
>> 
>> 
>>          <Call name="addConnector">
>>            <Arg>
>>              <New
>>        class="org.eclipse.jetty.server.ssl.SslSelectChannelConnector">
>>        <Set name="Port">8443</Set>
>>        <Set name="maxIdleTime">30000</Set>
>>                <Set name="Acceptors">2</Set>
>>                <Set name="AcceptQueueSize">100</Set>
>>        <Set name="Keystore"><SystemProperty name="jetty.home"
>>        default="." />/etc/keystore</Set>
>>        <Set
>>        name="Password">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
>>        <Set name="KeyPassword">OBF:1u2u1wml1z7s1z7a1wnl1u2g</Set>
>>                <Set name="truststore"><SystemProperty
>>        name="jetty.home" default="." />/etc/keystore</Set>
>>                <Set
>>        name="trustPassword">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
>>              </New>
>>            </Arg>
>>          </Call>
>>        </Configure>
> 

Re: [Exist-development] SSL for Jetty under trunk

[Dmitriy S. <sha...@gm...>]

Well, add new mode "jettySSL" should solve problem.

If no objections, I can make it this way.

-- 
Cheers,

Dmitriy Shabanov

On Tue, 2010-03-30 at 00:18 -0500, Loren Cahlander wrote:
> The problem with that, is that the exist startup uses the following in
> org.exist.start.Main:
> 
> 
>                 String config;
>                 if (_mode.equals("jetty"))
>                     config = "jetty.xml";
>                 else
>                     config = "standalone.xml";
>                 args = new String[]{ System.getProperty("jetty.home")
> + File.separatorChar + "etc"
>                         + File.separatorChar + config };
> 
> 
> There currently is no option to specify any additional jetty
> configuration files.
> 
> 
> On Mar 29, 2010, at 11:55 PM, Dmitriy Shabanov wrote:
> 
> > Loren,
> > 
> > Better keep them separate & add  
> > 
> > <!-- ==============================================================
> > --> 
> > <!-- Configure SSL for the Jetty Server
> >                             --> 
> > <!-- this configuration file should be used in combination with
> >     --> 
> > <!-- other configuration files.  e.g.
> >                               --> 
> > <!--    java -jar start.jar etc/jetty.xml etc/jetty-ssl.xml
> >         --> 
> > <!-- ==============================================================
> > --> 
> > 
> > to jetty.xml as information how enable it.
> > 
> > -- 
> > Cheers,
> > 
> > Dmitriy Shabanov
> > 
> > On Mon, 2010-03-29 at 18:55 -0500, Loren Cahlander wrote:
> > > Since we upgraded to Jetty 7, the information for enabling SSL has
> > > disappeared from the jetty configuration file.  I found
> > > jetty-ssl.xml
> > > in a download of the current release of Jetty.  Shall we add an
> > > option
> > > to look at the jetty-ssl.xml file as well as jetty.xml, or just
> > > add
> > > the contents of the jetty-ssl.xml file to the jetty.xml file?
> > > 
> > > 
> > > Below is the contents of the jetty-ssl.xml file:
> > > 
> > > 
> > >        <?xml version="1.0"?>
> > >        <!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN"
> > >        "http://www.eclipse.org/jetty/configure.dtd">
> > > 
> > > 
> > >        <!--
> > >        =============================================================== -->
> > >        <!-- Configure SSL for the Jetty Server
> > >        -->
> > >        <!-- this configuration file should be used in combination
> > >        with      -->
> > >        <!-- other configuration files.  e.g.
> > >        -->
> > >        <!--    java -jar start.jar etc/jetty.xml etc/jetty-ssl.xml
> > >        -->
> > >        <!--
> > >        =============================================================== -->
> > >        <Configure id="Server"
> > >        class="org.eclipse.jetty.server.Server">
> > > 
> > > 
> > >          <!-- if NIO is not available, use
> > >        org.eclipse.jetty.server.ssl.SslSocketConnector -->
> > > 
> > > 
> > >          <Call name="addConnector">
> > >            <Arg>
> > >              <New
> > >        class="org.eclipse.jetty.server.ssl.SslSelectChannelConnector">
> > >        <Set name="Port">8443</Set>
> > >        <Set name="maxIdleTime">30000</Set>
> > >                <Set name="Acceptors">2</Set>
> > >                <Set name="AcceptQueueSize">100</Set>
> > >        <Set name="Keystore"><SystemProperty name="jetty.home"
> > >        default="." />/etc/keystore</Set>
> > >        <Set
> > >        name="Password">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
> > >        <Set name="KeyPassword">OBF:1u2u1wml1z7s1z7a1wnl1u2g</Set>
> > >                <Set name="truststore"><SystemProperty
> > >        name="jetty.home" default="." />/etc/keystore</Set>
> > >                <Set
> > >        name="trustPassword">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
> > >              </New>
> > >            </Arg>
> > >          </Call>
> > >        </Configure>
> > 
> > 
> 
> 

Re: [Exist-development] SSL for Jetty under trunk

[Dannes W. <da...@ex...>]

Hi,

On Tue, Mar 30, 2010 at 7:26 AM, Dmitriy Shabanov <sha...@gm...> wrote:
> Well, add new mode "jettySSL" should solve problem.
>
> If no objections, I can make it this way.

as long it is switched off by default (and no certificate is deployed)

regards

Dannes

-- 
eXist-db Native XML Database - http://exist-db.org
Join us on linked-in: http://www.linkedin.com/groups?gid=35624

Re: [Exist-development] SSL for Jetty under trunk

[Dmitriy S. <sha...@gm...>]

On Tue, 2010-03-30 at 08:18 +0200, Dannes Wessels wrote:
> Hi,
> 
> On Tue, Mar 30, 2010 at 7:26 AM, Dmitriy Shabanov <sha...@gm...> wrote:
> > Well, add new mode "jettySSL" should solve problem.
> >
> > If no objections, I can make it this way.
> 
> as long it is switched off by default (and no certificate is deployed)

default will be jetty mode as it now. 

BTW, should I add standaloneSSL?

-- 
Cheers,

Dmitriy Shabanov

Re: [Exist-development] SSL for Jetty under trunk

[José M. F. G. <jm...@us...>]

Hi everybody,
	although it is not what you need or you are looking for, remember the changes of r11466 commit, which allows relocating the jetty configuration directory using the system property jetty.home on startup.

	José María

On 03/30/10 08:20, Dmitriy Shabanov wrote:
> On Tue, 2010-03-30 at 08:18 +0200, Dannes Wessels wrote:
>> Hi,
>>
>> On Tue, Mar 30, 2010 at 7:26 AM, Dmitriy Shabanov<sha...@gm...>  wrote:
>>> Well, add new mode "jettySSL" should solve problem.
>>>
>>> If no objections, I can make it this way.
>>
>> as long it is switched off by default (and no certificate is deployed)
>
> default will be jetty mode as it now.
>
> BTW, should I add standaloneSSL?
>
>
>
>
> ------------------------------------------------------------------------------
> Download Intel&#174; Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
>
>
>
> _______________________________________________
> Exist-development mailing list
> Exi...@li...
> https://lists.sourceforge.net/lists/listinfo/exist-development

-- 
"La violencia es el último recurso del incompetente"
	- Salvor Hardin en "La Fundación" de Isaac Asimov
"Premature optimization is the root of all evil." - Donald Knuth

José María Fernández González
e-mail: jos...@gm...