Re: [jetty-users] problem with security constraint

[Mario Georgiev <mario@xxxxxxxxxxxxxx>]

Hi,

Yes I have "confidentialPort" set in the config.
Here are the configurations for the connectors:

<New id="sslContextFactory"
class="org.eclipse.jetty.http.ssl.SslContextFactory">
  <Set name="KeyStore"><Property name="jetty.home" default="."
/>mykey.keystore</Set>
  <Set name="KeyStorePassword">pass</Set>
  <Set name="KeyManagerPassword">pass</Set>
  <Set name="TrustStore"><Property name="jetty.home" default="."
/>mytruststore.keystore</Set>
  <Set name="TrustStorePassword">pass</Set>
</New>

    <Call name="addConnector">
        <Arg>
            <New class="org.eclipse.jetty.server.ssl.SslSelectChannelConnector">
                <Arg><Ref id="sslContextFactory" /></Arg>
                <Set name="Port">8443</Set>

                <Set name="maxIdleTime">45000</Set>
                <Set name="AcceptQueueSize">100</Set>
                <Set name="Acceptors">2</Set>
                <Set name="lowResourcesConnections">11000</Set>
                <Set name="lowResourcesMaxIdleTime">1000</Set>
            </New>
        </Arg>
    </Call>

    <Call name="addConnector">
        <Arg>
            <New class="org.eclipse.jetty.server.nio.SelectChannelConnector">
                <Set name="host">
                    <Property name="jetty.host" />
                </Set>
                <Set name="port">
                    <Property name="jetty.port" default="8080" />
                </Set>
                <Set name="maxIdleTime">45000</Set>
                <Set name="Acceptors">2</Set>
                <Set name="statsOn">false</Set>
                <Set name="confidentialPort">8443</Set>
                <Set name="lowResourcesConnections">10000</Set>
                <Set name="lowResourcesMaxIdleTime">5000</Set>
                <Set name="ThreadPool">
                    <New class="org.eclipse.jetty.util.thread.QueuedThreadPool">
                        <Set name="name">SSL Thread Pool</Set>
                        <Set name="minThreads">10</Set>
                        <Set name="maxThreads">400</Set>
                    </New>
                </Set>
            </New>
        </Arg>
    </Call>


Do you know where in the code to look for these settings?
I can try to debug it and see what is going on, I just need some
direction to look for.


On Wed, Jan 11, 2012 at 11:15, Simone Bordet <sbordet@xxxxxxxxxxx> wrote:
> Hi,
>
> On Wed, Jan 11, 2012 at 10:05, Mario Georgiev <mario@xxxxxxxxxxxxxx> wrote:
>> Hi Thomas,
>>
>> The SSL connector is setup as it should and works like a charm. I have
>> working SSL environment and I can open pages/access resources on https
>> with no problems at all.
>> The redirect from http to https that should happen from the
>> configuration with this security constraint - that is not working.
>>
>> I forgot to tell: Jetty version I use is 7.5.4.v20111024
>
> Did you specify the confidentialPort in the non-SSL connector ?
> Otherwise Jetty will not know where to redirect to.
>
> Simon
> --
> http://cometd.org
> http://intalio.com
> http://bordet.blogspot.com
> ----
> Finally, no matter how good the architecture and design are,
> to deliver bug-free software with optimal performance and reliability,
> the implementation technique must be flawless.   Victoria Livschitz
> _______________________________________________
> jetty-users mailing list
> jetty-users@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/jetty-users



-- 
Regards,
Mario Georgiev
Senior Web Developer

Trading 212
www.trading212.com

E-mail: mario.georgiev@xxxxxxxxxxxxxx