Re: [Geoserver-users] Access WFS services over https

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

Finally found appropriate solution for Geoserver https configuration 
Here are the steps to enable jetty to run geoserver on https, port:8443

• *Configuring Jetty for SSL*
/Generating Keys and Certificates with JDK’s keytool/

1. Use keytool to generate key pairs and certificates. /keytool.exe/ is
available in installed jdk’s folder, ex: C:\Program
Files\Java\jre1.8.0_201\bin.

2. Open command prompt and go to the directory where/ keytool.exe/ is
present.

3. Run following command for creating keystore:
*/keytool -keystore keystore -alias jetty -genkey -keyalg RSA/*
4. Provide basic details after executing above command like name, country,
and keystore password. Note down the entered password since it will be used
while replacing the existing keystore in geoserver folder with the new one.

5. Now open /jetty-ssl.xml/ file present in etc folder and replace the
KeyStorePassword, KeyManagerPassword, TrustStorePassword with the new
password which is created while creating keystore.

6. Open & check /jetty.xml/ file in same folder, on which port https will
run.

• *Add new Keystore in Geoserver*

7. Copy the created keystore file and replace with the existing available in
etc folder of geoserver ex: C:\GeoServer\etc.

8. Now check if ssl.mod file is present in modules folder or not, ex:
C:\GeoServer\modules.

9. If present, then open the file and replace the password in
jetty.keystore.password, jetty.keymanager.password and
jetty.truststore.password with the new password. Otherwise download it from
http://central.maven.org/maven2/org/eclipse/jetty/jetty-distribution/9.2.13.v20150730/jetty-distribution-9.2.13.v20150730.tar.gz.

*NOTE* : Please make sure password entered should be same as in
jetty-ssl.xml.

10. Open start.ini file present in C:\GeoServer folder add  /--module =ssl,
--module=https and jetty.secure.port=8443/ (if https is running on Port
8443.

11. Run geoserver, enter url https://localhost:8443/geoserver (assuming
geoserver on local system).

--
Sent from: http://osgeo-org.1560.x6.nabble.com/GeoServer-User-f3786390.html