Hello,

I am hoping to find some help in configuring HTTPS for our in-house GeoServer.  
While I do not directly support GeoServer, I support the infrastructure behind 
it and our GeoServer vendor\programmer is not yet familiar with enabling SSL in 
the Jetty\GeoServer.  I have been doing some reading and attempting to follow 
the article 
'https://monicamohangis.medium.com/installing-ssl-certificate-for-geoserver-jetty-1d325e23e0e1'.
  I have a UCC SSL Certificate in PFX form that I would like to use to secure 
the page.

Since I have the certificate already, I skipped the 'Generate PFX Cert' 
section.  Generation of the KEYSTORE file seemed to go normal. When configuring 
the start.ini file, I had two questions.

  1.  Does the text go directly after module-http or after the 
jetty.http.port\idleTimeout settings?
  2.  Do I change the jetty keyStore password fields to be the password I used 
to create the KEYSTORE file or do I leave them as 'password'

Furthermore; when editing the jetty-ssl-context.xml to enter the OBF password, 
there appears to be two spots in the file that have a spot for an OBF; do I 
input my OBF in both places or just one and if so which one?

Or, is there a better article\method\guide for configuring HTTPS on GeoServer?


GeoServer Version2.24.0
JettyServer jetty-http-9.4.52.v20230823.jar

Michael W. Hemstreet | Senior Network Engineer

_______________________________________________
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this: 
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer


Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to