Finally found appropriate solution for Geoserver https configuration 
Here are the steps to enable jetty to run geoserver on https, port:8443

• *Configuring Jetty for SSL*
/Generating Keys and Certificates with JDK’s keytool/

1. Use keytool to generate key pairs and certificates. /keytool.exe/ is
available in installed jdk’s folder, ex: C:\Program
Files\Java\jre1.8.0_201\bin.

2. Open command prompt and go to the directory where/ keytool.exe/ is
present.

3. Run following command for creating keystore:
*/keytool -keystore keystore -alias jetty -genkey -keyalg RSA/*
4. Provide basic details after executing above command like name, country,
and keystore password. Note down the entered password since it will be used
while replacing the existing keystore in geoserver folder with the new one.

5. Now open /jetty-ssl.xml/ file present in etc folder and replace the
KeyStorePassword, KeyManagerPassword, TrustStorePassword with the new
password which is created while creating keystore.

6. Open & check /jetty.xml/ file in same folder, on which port https will
run.

• *Add new Keystore in Geoserver*

7. Copy the created keystore file and replace with the existing available in
etc folder of geoserver ex: C:\GeoServer\etc.

8. Now check if ssl.mod file is present in modules folder or not, ex:
C:\GeoServer\modules.

9. If present, then open the file and replace the password in
jetty.keystore.password, jetty.keymanager.password and
jetty.truststore.password with the new password. Otherwise download it from
http://central.maven.org/maven2/org/eclipse/jetty/jetty-distribution/9.2.13.v20150730/jetty-distribution-9.2.13.v20150730.tar.gz.

*NOTE* : Please make sure password entered should be same as in
jetty-ssl.xml.

10. Open start.ini file present in C:\GeoServer folder add  /--module =ssl,
--module=https and jetty.secure.port=8443/ (if https is running on Port
8443.

11. Run geoserver, enter url https://localhost:8443/geoserver (assuming
geoserver on local system).



--
Sent from: http://osgeo-org.1560.x6.nabble.com/GeoServer-User-f3786390.html


_______________________________________________
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this: 
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer


Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to