Re: [Exist-development] SSL for Jetty under trunk

[Dmitriy S. <sha...@gm...>]

Well, add new mode "jettySSL" should solve problem.

If no objections, I can make it this way.

-- 
Cheers,

Dmitriy Shabanov

On Tue, 2010-03-30 at 00:18 -0500, Loren Cahlander wrote:
> The problem with that, is that the exist startup uses the following in
> org.exist.start.Main:
> 
> 
>                 String config;
>                 if (_mode.equals("jetty"))
>                     config = "jetty.xml";
>                 else
>                     config = "standalone.xml";
>                 args = new String[]{ System.getProperty("jetty.home")
> + File.separatorChar + "etc"
>                         + File.separatorChar + config };
> 
> 
> There currently is no option to specify any additional jetty
> configuration files.
> 
> 
> On Mar 29, 2010, at 11:55 PM, Dmitriy Shabanov wrote:
> 
> > Loren,
> > 
> > Better keep them separate & add  
> > 
> > <!-- ==============================================================
> > --> 
> > <!-- Configure SSL for the Jetty Server
> >                             --> 
> > <!-- this configuration file should be used in combination with
> >     --> 
> > <!-- other configuration files.  e.g.
> >                               --> 
> > <!--    java -jar start.jar etc/jetty.xml etc/jetty-ssl.xml
> >         --> 
> > <!-- ==============================================================
> > --> 
> > 
> > to jetty.xml as information how enable it.
> > 
> > -- 
> > Cheers,
> > 
> > Dmitriy Shabanov
> > 
> > On Mon, 2010-03-29 at 18:55 -0500, Loren Cahlander wrote:
> > > Since we upgraded to Jetty 7, the information for enabling SSL has
> > > disappeared from the jetty configuration file.  I found
> > > jetty-ssl.xml
> > > in a download of the current release of Jetty.  Shall we add an
> > > option
> > > to look at the jetty-ssl.xml file as well as jetty.xml, or just
> > > add
> > > the contents of the jetty-ssl.xml file to the jetty.xml file?
> > > 
> > > 
> > > Below is the contents of the jetty-ssl.xml file:
> > > 
> > > 
> > >        <?xml version="1.0"?>
> > >        <!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN"
> > >        "http://www.eclipse.org/jetty/configure.dtd">
> > > 
> > > 
> > >        <!--
> > >        =============================================================== -->
> > >        <!-- Configure SSL for the Jetty Server
> > >        -->
> > >        <!-- this configuration file should be used in combination
> > >        with      -->
> > >        <!-- other configuration files.  e.g.
> > >        -->
> > >        <!--    java -jar start.jar etc/jetty.xml etc/jetty-ssl.xml
> > >        -->
> > >        <!--
> > >        =============================================================== -->
> > >        <Configure id="Server"
> > >        class="org.eclipse.jetty.server.Server">
> > > 
> > > 
> > >          <!-- if NIO is not available, use
> > >        org.eclipse.jetty.server.ssl.SslSocketConnector -->
> > > 
> > > 
> > >          <Call name="addConnector">
> > >            <Arg>
> > >              <New
> > >        class="org.eclipse.jetty.server.ssl.SslSelectChannelConnector">
> > >        <Set name="Port">8443</Set>
> > >        <Set name="maxIdleTime">30000</Set>
> > >                <Set name="Acceptors">2</Set>
> > >                <Set name="AcceptQueueSize">100</Set>
> > >        <Set name="Keystore"><SystemProperty name="jetty.home"
> > >        default="." />/etc/keystore</Set>
> > >        <Set
> > >        name="Password">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
> > >        <Set name="KeyPassword">OBF:1u2u1wml1z7s1z7a1wnl1u2g</Set>
> > >                <Set name="truststore"><SystemProperty
> > >        name="jetty.home" default="." />/etc/keystore</Set>
> > >                <Set
> > >        name="trustPassword">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
> > >              </New>
> > >            </Arg>
> > >          </Call>
> > >        </Configure>
> > 
> > 
> 
>