[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
[
List Home]
|
Re: [jetty-users] How to configure cxf with jetty to run over TLS?
|
On 11/19/10 6:11 PM, Thomson, Duncan wrote:
I can make some guesses about how to customize this for my application. But, where would I even put this configuration? Taking a wild guess, I tried putting it in my cxf.xml file, but that just results in parse errors. Presumably I should put it in my jetty.xml file - except where do I put that? I didn't install jetty explicitly (it's included in the cxf install) and I don't have a "JETTY_HOME" as far as I know. I have no idea where to put this file to have it read when cxf fires up the jetty server.
In a standard Jetty install all those configurations are placed in
$JETTY_HOME/etc. To enable SSL you'd drop the "addConnector" XML
snippet in to a file in that directory (or just edit the jetty-ssl.xml
file that comes with Jetty).
If Apache CXF has done a custom Jetty bundling you're almost certainly
going to have to ask them where they expect you to make such changes so
that they take effect and so that they don't get overwritten by some
internal CXF process or something.
There is also example code at http://cxf.apache.org/docs/standalone-http-transport.html that shows configuration of the jetty https within cxf.xml, including the following snippet:
<beans xmlns="http://www.springframework.org/schema/beans";
xmlns:httpj="http://cxf.apache.org/transports/http-jetty/configuration";
etc. etc...
<httpj:engine-factory bus="cxf">
<!-- you just need to specify the TLS Server configuration for the certain port -->
<httpj:engine port="9003">
<httpj:tlsServerParameters>
<sec:keyManagers keyPassword="password">
<sec:keyStore type="JKS" password="password"
Etc....
Looks like this is getting to what I need. But the explanation provided is very minimal. Just by including a tlsServerParameters item am I specifying that tls is required (https rather than http)? Do I have to guess at how to write this xml or is it documented somewhere?
Again, this is CXF specific configuration. If their configuration is
going to be documented somewhere it'll be on their site. If it's not
then they're the ones that will have to tell you what they intended.
--
Chad La Joie
http://itumi.biz
trusted identities, delivered
