Skip to content

Instantly share code, notes, and snippets.

@olbboy
Forked from jelinden/self-signed_ssl.txt
Created January 5, 2022 18:28
Show Gist options
  • Save olbboy/ad013d007d739475060fe5da2d52c1e6 to your computer and use it in GitHub Desktop.
Save olbboy/ad013d007d739475060fe5da2d52c1e6 to your computer and use it in GitHub Desktop.
Jetty self-signed ssl certification
sudo openssl genrsa -des3 -out server.key 1024
openssl req -new -key server.key -out server.csr
cp server.key server.key.old
openssl rsa -in server.key.old -out server.key
sudo openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt
sudo openssl pkcs12 -inkey server.key -in server.crt -export -out server.pkcs12
keytool -importkeystore -srckeystore server.pkcs12 -srcstoretype PKCS12 -destkeystore keystore
keytool -list -v -keystore keystore
java -cp /jetty-8.1.3/lib/jetty-util-8.1.3.v20120416.jar org.eclipse.jetty.util.security.Password password
nano /jetty-8.1.3/etc/jetty-ssl.xml
<New id="sslContextFactory" class="org.eclipse.jetty.http.ssl.SslContextFactory">
<Set name="KeyStore">/etc/keystore/keystore</Set>
<Set name="KeyStorePassword">OBF:generatedpassword</Set>
<Set name="KeyManagerPassword">OBF:generatedpassword</Set>
<Set name="TrustStore">/etc/keystore/keystore</Set>
<Set name="TrustStorePassword">OBF:generatedpassword</Set>
</New>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment