Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Eclipse Projects » Remote Application Platform (RAP) » Configuring jetty truststore unsuccessful(Works in tomcat, and keystore config works in tomcat and jetty)
Configuring jetty truststore unsuccessful [message #1067832] Wed, 10 July 2013 19:02
Mark Leone is currently offline Mark Leone
Messages: 67
Registered: April 2012
Member
I'm trying to configure the embedded jetty server in my eclipse IDE to use ssl and require client authentication. This is partly to more conveniently test my RAP application without having to deploy it to tomcat, and also because I'm having a strange problem running in tomcat and I want to see if the same thing happens in jetty.

I set the following properties in my launch configuration for the RAP application:

-Dorg.eclipse.equinox.http.jetty.https.enabled=true
-Dorg.eclipse.equinox.http.jetty.https.port=8445
-Dorg.eclipse.equinox.http.jetty.ssl.keystore=/path/to/my.keystore
-Dorg.eclipse.equinox.http.jetty.ssl.keypassword=password
-Dorg.eclipse.equinox.http.jetty.ssl.truststore=/path/to/my.truststore
-Dorg.eclipse.equinox.http.jetty.ssl.truststorepassword=password


The trustore and keystore are both jks keystores, the same files used in tomcat, for which two-way authentication works properly.

It looks like the keystore setting is working, but not the truststore, because my browser is presented with the server cert from the keystore, but the connection is denied with message "SSL peer cannot verify your certificate".

I tried also setting the trustore properties using javax.net.ssl properties as follows:

-Djavax.net.ssl.trustStore=/path/to/my.truststore
-Djavax.net.ssl.trustStorePassword=password


But I get the same behavior. I also tried setting javax.net.ssl.trustStoreType=jks (and JKS) to no avail.

Can someone tell me the proper way to configure Jetty's truststore with properties?
Previous Topic:Drawing combo in workbench
Next Topic:Clientside Input Validation
Goto Forum:
  


Current Time: Thu Oct 02 08:29:18 GMT 2014

Powered by FUDForum. Page generated in 0.02016 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software