Paul Spencer created KARAF-7633:
-----------------------------------
Summary: HTTPS SSL configuration needs updating
Key: KARAF-7633
URL: https://issues.apache.org/jira/browse/KARAF-7633
Project: Karaf
Issue Type: Documentation
Components: karaf
Affects Versions: 4.4.2
Environment: Karaf 4.2.2
Reporter: Paul Spencer
The documentation to enable an HTTP connector,
[https://karaf.apache.org/manual/latest/#_webcontainer_jsp_servlet], needs to
be updated. Specifically the etc/org.ops4j.pax.web.cfg configuration has the
following inaccuracies
- "org.osgi.service.http.secure.enabled = true" is required to enable https
- org.ops4j.pax.web.ssl.keystore.password is required
- org.ops4j.pax.web.ssl.keypassword is not used
- "org.ops4j.pax.web.ssl.keystore.type = JKS" is optional but adds clarity.
***
* Steps I took to add a enable https
***
- Generate the self signing key files "keystore" in JKS format using the
following command
keytool -genkey -keyalg RSA -alias selfsigned -keystore keystore -storepass
karaf1234 -validity 360 -keysize 2048
- Copied the generated file, keystore, to ${karaf.etc}
- Add the following to etc/org.ops4j.pax.web.cfg configuration
org.osgi.service.http.secure.enabled = true
org.osgi.service.http.port.secure = 8443
org.ops4j.pax.web.ssl.keystore = ${karaf.etc}/keystore
org.ops4j.pax.web.ssl.keystore.password = karaf1234
org.ops4j.pax.web.ssl.keystore.type = JKS
--
This message was sent by Atlassian Jira
(v8.20.10#820010)