If Jetty HTTP is enabled in opennms.properties, the WebUI doesn't work with SSL
Description
Acceptance / Success Criteria
Lucidchart Diagrams
Activity

Juan Pablo Marco Cardona January 27, 2015 at 4:49 AM
Hello,
i would just add that executing "the upgrade tools" (`$OPENNMS_HOME/bin/install -dis) didn't work for me (while installing the 14.0.1 version from the yum repository).
As i commented before in this same issue, just this works for me:
I had followed this url http://www.opennms.org/wiki/Standalone_HTTPS_with_Jetty#For_the_Impatient in order to enable https, but if i don't copy the jetty.xml file and uncomment the SslSelectChannelConnector section, Jetty won't open the 8443 port.
Best regards,
Pablo

Seth Leger January 26, 2015 at 3:05 PM
Alejandro closed this by using the upgrade tools in 14. We just need to document that you can run /opt/opennms/bin/install -dis to update the jetty.xml file. Marking as fixed.

Seth Leger January 22, 2015 at 2:17 PM
OK, I get it now. The system properties from opennms.properties are used to fill in values in the jetty.xml file that is copied into place.
I think that we just need to update the http://www.opennms.org/wiki/Standalone_HTTPS_with_Jetty wiki page with instructions regarding the jetty.xml file and then we can close this issue. Unless there is a way to put a conditional into the jetty.xml that enables the SSL section if the org.opennms.netmgt.jetty.https-port system property is present...

Alejandro Galue January 22, 2015 at 11:50 AM
Here is how I understand it works:
1) Enable SSL on opennms.properties as usual
2) Copy over the jetty.xml from the examples directory to /opt/opennms/etc
3) Uncomment the SSL section on jetty.xml
4) Restart OpenNMS
5) Done
The upgrade tools are going to do that for you if you do this:
1) Stop OpenNMS
2) Enable SSL on opennms.properties
3) Execute the upgrade tools
4) Start OpenNMS

Seth Leger January 22, 2015 at 11:32 AM
I'm confused. It sounds like all of the Jetty HTTPS config is now handled in the jetty.xml file but I still see the Jetty HTTPS section in opennms.properties. Should it be removed to avoid confusion or am I misunderstanding how things work now?
Before introducing the jetty.xml feature, in order to use SSL with Jetty, you just need to uncomment org.opennms.netmgt.jetty.https-port (besides other attributes) and restart OpenNMS.
Now, besides that, you must copy jetty.xml from etc/examples to etc/ and uncomment the section related with SslSelectChannelConnector to make it work.
Something similar happens with AJP.