Jetty 9.3

[Glen Shere]

Scott and team, I was able to start the IdP (3.1.2) with Jetty 9.3
(9.3.1.v20150714). Some notes below as to how I deviated from the
instructions provided.

1. I must uncomment and configure idp.home in jetty-base/start.ini even
though I am using the default path /opt/shibboleth-idp

2. I did not create jetty-base/modules/https.mod because no changes needed
vs. the Jetty distribution.

3. I must comment out the [files] section (2 lines) in
jetty-base/modules/ssl.mod to ignore absence of the default Jetty keystore.

4. I found that configuring SSL in jetty-base/modules/ssl.mod has no
effect. Instead I must create a file jetty-base/start.d/idp.ini with the
four lines:

jetty.ssl.port=443
jetty.sslContext.keyStorePath=/opt/shibboleth-idp/credentials/idp-browser.p12
jetty.sslContext.keyStoreType=PKCS12
jetty.sslContext.keyStorePassword=redacted

Please comment; what mistakes am I making?

Thanks.

Glen Shere
Ohio Northern University


On Wed, Jul 22, 2015 at 10:48 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> For anybody not monitoring old threads, I bottomed out the problems people
> hit with Jetty 9.3 and created a new page documenting that setup process
> [1]. The old Jetty page was renamed Jetty92.
>
>
>
> The keystore problems were primarily due to a bug that I found and
> reported [2]. It's already been fixed, but obviously that doesn't help for
> the moment, so my configuration example works around the bug.
>
> I've lightly tested on my own and things seem to startup and run
> correctly, but I haven't tested the IdP with it.
>
> -- Scott
>
> [1] https://wiki.shibboleth.net/confluence/display/IDP30/Jetty93
> [2] https://bugs.eclipse.org/bugs/show_bug.cgi?id=473321
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150730/c4580d38/attachment.html>