Re: [Exist-development] SSL for Jetty under trunk

[Loren C. <lor...@gm...>]

The problem with that, is that the exist startup uses the following in org.exist.start.Main:

                String config;
                if (_mode.equals("jetty"))
                    config = "jetty.xml";
                else
                    config = "standalone.xml";
                args = new String[]{ System.getProperty("jetty.home") + File.separatorChar + "etc"
                        + File.separatorChar + config };

There currently is no option to specify any additional jetty configuration files.

On Mar 29, 2010, at 11:55 PM, Dmitriy Shabanov wrote:

> Loren,
> 
> Better keep them separate & add  
> 
> <!-- ============================================================== --> 
> <!-- Configure SSL for the Jetty Server                             --> 
> <!-- this configuration file should be used in combination with     --> 
> <!-- other configuration files.  e.g.                               --> 
> <!--    java -jar start.jar etc/jetty.xml etc/jetty-ssl.xml         --> 
> <!-- ============================================================== --> 
> 
> to jetty.xml as information how enable it.
> 
> -- 
> Cheers,
> 
> Dmitriy Shabanov
> 
> On Mon, 2010-03-29 at 18:55 -0500, Loren Cahlander wrote:
>> Since we upgraded to Jetty 7, the information for enabling SSL has
>> disappeared from the jetty configuration file.  I found jetty-ssl.xml
>> in a download of the current release of Jetty.  Shall we add an option
>> to look at the jetty-ssl.xml file as well as jetty.xml, or just add
>> the contents of the jetty-ssl.xml file to the jetty.xml file?
>> 
>> 
>> Below is the contents of the jetty-ssl.xml file:
>> 
>> 
>>        <?xml version="1.0"?>
>>        <!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN"
>>        "http://www.eclipse.org/jetty/configure.dtd">
>> 
>> 
>>        <!--
>>        =============================================================== -->
>>        <!-- Configure SSL for the Jetty Server
>>        -->
>>        <!-- this configuration file should be used in combination
>>        with      -->
>>        <!-- other configuration files.  e.g.
>>        -->
>>        <!--    java -jar start.jar etc/jetty.xml etc/jetty-ssl.xml
>>        -->
>>        <!--
>>        =============================================================== -->
>>        <Configure id="Server"
>>        class="org.eclipse.jetty.server.Server">
>> 
>> 
>>          <!-- if NIO is not available, use
>>        org.eclipse.jetty.server.ssl.SslSocketConnector -->
>> 
>> 
>>          <Call name="addConnector">
>>            <Arg>
>>              <New
>>        class="org.eclipse.jetty.server.ssl.SslSelectChannelConnector">
>>        <Set name="Port">8443</Set>
>>        <Set name="maxIdleTime">30000</Set>
>>                <Set name="Acceptors">2</Set>
>>                <Set name="AcceptQueueSize">100</Set>
>>        <Set name="Keystore"><SystemProperty name="jetty.home"
>>        default="." />/etc/keystore</Set>
>>        <Set
>>        name="Password">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
>>        <Set name="KeyPassword">OBF:1u2u1wml1z7s1z7a1wnl1u2g</Set>
>>                <Set name="truststore"><SystemProperty
>>        name="jetty.home" default="." />/etc/keystore</Set>
>>                <Set
>>        name="trustPassword">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
>>              </New>
>>            </Arg>
>>          </Call>
>>        </Configure>
>