jetty-base 9.4 : run --create-files on Windows ?

[Cantor, Scott]

On 6/12/17, 8:20 PM, "dev on behalf of Cantor, Scott" <dev-bounces at shibboleth.net on behalf of cantor.2 at osu.edu> wrote:

> Not great, unless there's a signature check. I was interested in it so we could tell stand-alone deployers that if they wanted to
> grab our example configuration, they could just do this and we (maybe) wouldn't have to distribute anything at all, just post a
> module file to bootstrap the rest.

By which I'm saying that if you want the supposed convenience of not having to understand how to configure Jetty yourself, and you also want a signature check, well, that's not happening until somebody fixes all these pieces and parts to stop being ignorant  about security.

I'm fine posting the signatures or checksums ourselves so people that want to split the difference can check them.

Ultimately if we want to just say forget it and tar up a jetty-base tree with some property/module files and post it, that's fine. It's not like it changes much in between minor versions anyway, I've been using the same files with 9.3 the whole time. I just wanted to see if there was a more automated approach we could live with.

-- Scott