Jetty 9.3

[Cantor, Scott]

On 7/30/15, 11:57 AM, "users on behalf of Glen Shere" <users-bounces at shibboleth.net on behalf of g-shere at onu.edu> wrote:



>Scott and team, I was able to start the IdP (3.1.2) with Jetty 9.3 (9.3.1.v20150714). Some notes below as to how I deviated from the instructions provided.

I assume you mean the Jetty 9.3 instructions.

>1. I must uncomment and configure idp.home in jetty-base/start.ini even though I am using the default path /opt/shibboleth-idp

I did not have to do that.

>2. I did not create jetty-base/modules/https.mod because no changes needed vs. the Jetty distribution.

I don't recall what's in it.

>3. I must comment out the [files] section (2 lines) in jetty-base/modules/ssl.mod to ignore absence of the default Jetty keystore.

That's a bug in Jetty itself, but I can mention it. It doesn't actually hurt anything, just annoying.

>4. I found that configuring SSL in jetty-base/modules/ssl.mod has no effect. Instead I must create a file jetty-base/start.d/idp.ini with the four lines:

Also not true in my case, so I don't know what to tell you.

>jetty.ssl.port=443
>jetty.sslContext.keyStorePath=/opt/shibboleth-idp/credentials/idp-browser.p12
>jetty.sslContext.keyStoreType=PKCS12
>jetty.sslContext.keyStorePassword=redacted

Those are all settable in any mod or ini file, by definition, it's one big global pile of stuff. It can't work there but not work in ssl.mod. Maybe there's an ordering issue.

-- Scott