Re: [jetty-users] mod vs etc

[Joakim Erdfelt <joakim@xxxxxxxxxxx>]

You do not modify mod files.

They are metadata (structure if you wish) to help get startup ordering and requirements correct.

The recommended approach.

1. Use a ${jetty.base} directory
   
2. Enable https or spdy (which will bring in ssl) modules in your ${jetty.base}/start.ini
   
   $ cd /var/jetty/my-base
   $ grep module start.ini
   --module=https
   --module=deploy
   
   
3. Edit your ${jetty.base}/start.ini to specify the properties you want to configure
   

$ cat start.ini

--module=https

--module=deploy

https.port=8443

https.timeout=30000

## SSL Keystore Configuration

# define the port to use for secure redirection

jetty.secure.port=8443

# Setup a demonstration keystore and truststore

jetty.keystore=etc/keystore

jetty.truststore=etc/keystore

# Set the demonstration passwords.

# Note that OBF passwords are not secure, just protected from casual observation

# See http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html

jetty.keystore.password=OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4

jetty.keymanager.password=OBF:1u2u1wml1z7s1z7a1wnl1u2g

jetty.truststore.password=OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4

To see what your configuration looks like ...

$ cd /var/jetty/my-base

$ java -jar /opt/jetty-dist/start.jar --list-config

--

Joakim Erdfelt <joakim@xxxxxxxxxxx>

webtide.com - intalio.com/jetty

Expert advice, services and support from from the Jetty & CometD experts

eclipse.org/jetty - cometd.org

On Mon, Feb 10, 2014 at 2:56 PM, Eric Nissan <eric.nissan@xxxxxxxxx> wrote:

I am a bit confused with Jetty 9.  I am trying to configure ssl.  I think I can either configure mod/ssl.mod or etc/jetty-ssl.xml?

but what is the difference.  

the sample ssl.mod references jetty-ssl.xml, and both of them have keystore passwords in them.  I am not sure which I should be configuring.

Thanks,

Eric

_______________________________________________
jetty-users mailing list
jetty-users@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/jetty-users