On 11/19/10 6:11 PM, Thomson, Duncan wrote:
I can make some guesses about how to customize this for my application.  But, where would 
I even put this configuration?  Taking a wild guess, I tried putting it in my cxf.xml 
file, but that just results in parse errors.  Presumably I should put it in my jetty.xml 
file - except where do I put that?  I didn't install jetty explicitly (it's included in 
the cxf install) and I don't have a "JETTY_HOME" as far as I know.  I have no 
idea where to put this file to have it read when cxf fires up the jetty server.

In a standard Jetty install all those configurations are placed in $JETTY_HOME/etc. To enable SSL you'd drop the "addConnector" XML snippet in to a file in that directory (or just edit the jetty-ssl.xml file that comes with Jetty).

If Apache CXF has done a custom Jetty bundling you're almost certainly going to have to ask them where they expect you to make such changes so that they take effect and so that they don't get overwritten by some internal CXF process or something.

There is also example code at 
http://cxf.apache.org/docs/standalone-http-transport.html that shows 
configuration of the jetty https within cxf.xml, including the following 
snippet:

<beans xmlns="http://www.springframework.org/schema/beans";
   xmlns:httpj="http://cxf.apache.org/transports/http-jetty/configuration";
        etc. etc...


   <httpj:engine-factory bus="cxf">
          <!-- you just need to specify the TLS Server configuration for the 
certain port -->
        <httpj:engine port="9003">
        <httpj:tlsServerParameters>
        <sec:keyManagers keyPassword="password">
        <sec:keyStore type="JKS" password="password"
Etc....

Looks like this is getting to what I need.  But the explanation provided is 
very minimal.  Just by including a tlsServerParameters item am I specifying 
that tls is required (https rather than http)?  Do I have to guess at how to 
write this xml or is it documented somewhere?

Again, this is CXF specific configuration. If their configuration is going to be documented somewhere it'll be on their site. If it's not then they're the ones that will have to tell you what they intended.

--
Chad La Joie
http://itumi.biz
trusted identities, delivered
_______________________________________________
jetty-users mailing list
[email protected]
https://dev.eclipse.org/mailman/listinfo/jetty-users

Reply via email to