Jetty SSL

[Peter Schober]

* Saeed Khademi <saeed at ipm.ir> [2018-04-18 11:59]:
> I am looking for a document explaining how to replace self-signed
> SSL certificate with a new valid one.
> I have Shibboleth idp 3.2.1, with jetty on windows server 2012 R2.

The Shibboleth documentation might not be the best place to get advise
on Jetty configuration. If you ask questions here they should be
specific.

> I tried following instructions in https://wiki.shibboleth.net/confluence/display/IDP30/Jetty93
> but I end up with page not found on https://localhost/idp/status and https://my-domain/idp/shibboleth

Since MS-Windows does not have the concept of priviledged ports AFAIK
you'll neither need to use the setuid extenion nor the port forwarding
approach mentioned in section "Configure HTTP Connectors" of the above
documentation.
I guess that leaves changing the ports and copying the files as
indicated. And of course having a proper keystore that contains the
TLS key pair plus any intermediate certs.

If the server does not start I would expect Jetty to say why in its
log files. So that's where you'd look.

The documentation does not cover all this because this is not the "How
to use Jetty with TLS" documentation. Jetty is not the software this
product produced or can support in any meaningful sense.

-peter