Have you faced issues when you have to quickly enable SSL and you got stuck with it :-(<\/p>\n
You are not alone, i will share my pain and some learning.<\/p>\n
I will share steps to enable SSL on jetty.<\/p>\n
Warning: Use below instruction only for dev setup and for production contact your security expert !<\/b><\/p>\n export jetty_home=…\/somejetty<\/p>\n export jetty_base = …\/your_application_install_location<\/p>\n It is recommended to keep jetty base out side of jetty installation otherwise you will have classpath nightmare<\/p>\n java -jar $jetty_home\/start.jar –add-to-startd=ssl jetty.base=$jetty_base<\/p>\n Once you run above command you will see something like below on console.<\/p>\n –module=https Check ssl port(jetty.ssl.port) and change it accordingly<\/p>\n jetty.ssl.port=port<\/p>\n Use same port as ssl.ini file.<\/p>\n java -jar $jetty_home\/start.jar jetty.base=$jetty_base<\/p>\n You are done :-) Jetty starts on ssl .<\/p>\n –Which certificate is used by jetty ?\u00a0<\/i><\/p>\n That is the magic, jetty ships with certificate that is already imported in keystore that jetty is using.<\/p>\n Jetty looks for keystore in $jetty_base\/etc\/keystore location.<\/p>\n –What is password of keystore<\/i><\/p>\n Key store password is $jetty_base\/start.d\/ssl.ini , but it is encrypted. You can use below command to get the password.<\/p>\n java -cp jetty-util-9.2.14.v20151106.jar org.eclipse.jetty.util.security.Password “OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4”\u00a0<\/i><\/p>\n it is “storepwd”<\/p>\n –How to see what is in key store ? run the below command and enter password<\/i><\/p>\n keytool –list\u00a0 -v -keystore keystore<\/p>\n If jetty gives some error like password is wrong or tampered then copy the keystore from $jetty_home\/etc\/keystore to\u00a0 $jetty_base\/etc<\/p>\n It takes only 5 minutes to perform all the steps but only if you know otherwise it is day long frustration. Enjoy development with jetty.<\/p>\n\n
\n
\r\nINFO: ssl initialised in ${jetty.base}\/start.d\/ssl.ini (created)\r\n\r\nINFO: ssl enabled in \/data\/segmentation\/segplat-deployments\/app\/application_secure\/bin\/${jetty.base}\/start.d\/ssl.ini\r\n\r\nINFO: server initialised in ${jetty.base}\/start.ini\r\n\r\nINFO: server enabled in ${jetty.base}\/start.ini\r\n\r\nINFO: server enabled in <transitive>\r\n\r\nINFO: resources initialised in ${jetty.base}\/start.ini\r\n\r\nINFO: resources enabled in ${jetty.base}\/start.ini\r\n\r\nINFO: resources enabled in <transitive><\/pre>\n\n
\n
\n
Magic Questions<\/h3>\n