Hello!

This sounds more like a Jetty issue. Having said that, I doubt that Jetty
will be able to use Ignite's sslContextFactory

See the jetty's configuration:
https://www.eclipse.org/jetty/documentation/current/configuring-ssl.html#configuring-sslcontextfactory

Regards,
-- 
Ilya Kasnacheev


вт, 4 дек. 2018 г. в 05:53, Shesha Nanda <[email protected]>:

> Hi,
>
> I am trying add ssl security for the ignite to access iginte REST API
> using HTTPS. I have fallowed below steps:
>
> I have enabled the ssl by adding below configurations.
>
>         <property name="connectorConfiguration">
>             <bean
> class="org.apache.ignite.configuration.ConnectorConfiguration">
>                 <property name="jettyPath"
> value="/home/test/jetty-server.xml" />
>                 <property name="sslEnabled" value="true"/>
>
>                 <property name="sslClientAuth" value="true"/>
>             </bean>
>         </property>
>
>             <property name="sslContextFactory">
>                   <bean class="org.apache.ignite.ssl.SslContextFactory">
>                         <property name="protocol" value="SSL"/>
>                         <property name="keyStoreFilePath"
> value="/opt/ssl/ignite-keystore.jks" />
>                         <property name="keyStorePassword" value="test1234"
> />
>                         <property name="trustStoreFilePath"
> value="/opt/ssl/ignite-truststore.jks" />
>                         <property name="trustStorePassword"
> value="test1234" />
>                   </bean>
>             </property>
>
>
> I am able to see [authentication=off, tls/ssl=on]  in the logs.
>
>
> Getting below error when I tried to access REST API using HTTPS request .
>
> curl https://localhost:8443/ignite?cmd=version
> curl: (35) SSL received a record that exceeded the maximum permissible
> length.
>
> If i try with http it's working
> curl http://localhost:8080/ignite?cmd=version
>
>
> Please let me know the configurations to enable SSL and access REST API
> using HTTPS
>
> --
> *Regards*
> *Sheshananda Naidu,*
> *+91-9035063060*
>

Reply via email to