If Jetty HTTP is enabled in opennms.properties, the WebUI doesn't work with SSL

Description

Before introducing the jetty.xml feature, in order to use SSL with Jetty, you just need to uncomment org.opennms.netmgt.jetty.https-port (besides other attributes) and restart OpenNMS.

Now, besides that, you must copy jetty.xml from etc/examples to etc/ and uncomment the section related with SslSelectChannelConnector to make it work.

Something similar happens with AJP.

Acceptance / Success Criteria

None

Lucidchart Diagrams

Activity

Show:

Juan Pablo Marco Cardona January 27, 2015 at 4:49 AM

Hello,
i would just add that executing "the upgrade tools" (`$OPENNMS_HOME/bin/install -dis) didn't work for me (while installing the 14.0.1 version from the yum repository).

As i commented before in this same issue, just this works for me:
I had followed this url http://www.opennms.org/wiki/Standalone_HTTPS_with_Jetty#For_the_Impatient in order to enable https, but if i don't copy the jetty.xml file and uncomment the SslSelectChannelConnector section, Jetty won't open the 8443 port.

Best regards,
Pablo

Seth Leger January 26, 2015 at 3:05 PM

Alejandro closed this by using the upgrade tools in 14. We just need to document that you can run /opt/opennms/bin/install -dis to update the jetty.xml file. Marking as fixed.

Seth Leger January 22, 2015 at 2:17 PM

OK, I get it now. The system properties from opennms.properties are used to fill in values in the jetty.xml file that is copied into place.

I think that we just need to update the http://www.opennms.org/wiki/Standalone_HTTPS_with_Jetty wiki page with instructions regarding the jetty.xml file and then we can close this issue. Unless there is a way to put a conditional into the jetty.xml that enables the SSL section if the org.opennms.netmgt.jetty.https-port system property is present...

Alejandro Galue January 22, 2015 at 11:50 AM

Here is how I understand it works:

1) Enable SSL on opennms.properties as usual
2) Copy over the jetty.xml from the examples directory to /opt/opennms/etc
3) Uncomment the SSL section on jetty.xml
4) Restart OpenNMS
5) Done

The upgrade tools are going to do that for you if you do this:

1) Stop OpenNMS
2) Enable SSL on opennms.properties
3) Execute the upgrade tools
4) Start OpenNMS

Seth Leger January 22, 2015 at 11:32 AM

I'm confused. It sounds like all of the Jetty HTTPS config is now handled in the jetty.xml file but I still see the Jetty HTTPS section in opennms.properties. Should it be removed to avoid confusion or am I misunderstanding how things work now?

Fixed

Details

Assignee

Reporter

Components

Fix versions

Affects versions

Priority

PagerDuty

Created July 3, 2014 at 1:56 PM
Updated October 12, 2023 at 4:30 PM
Resolved January 26, 2015 at 3:05 PM