xwiki enterprise 8.4.5使用https步骤

Posted 2020-10-08 @#￥%……

注：

操作前请做好备份
以下的jetty非通用的jetty，都是xwiki文件夹下的jetty或xwiki下data\jetty

1、准备keystore的密钥。拷贝到data\jetty\etc 目录下

2、修改jetty目录下（注：非data\jetty）etc下的jetty.xml

http改成https,8443改成443
<Set name="secureScheme">https</Set>
<Set name="securePort"><Property name="jetty.secure.port" default="443" /></Set>

3、修改jetty目录下（注：非data\jetty）etc下的jetty-https.xml

8443改成443
<Set name="port"><Property name="https.port" default="443" /></Set>

4、修改jetty目录下（注：非data\jetty）etc下的jetty-ssl.xml

其中tomcat.keystore为密钥，123456为密钥密码。

<Configure id="sslContextFactory" class="org.eclipse.jetty.util.ssl.SslContextFactory">
<Set name="KeyStorePath"><Property name="jetty.base" default="." />/<Property name="jetty.keystore" default="etc/tomcat.keystore"/></Set>
<Set name="KeyStorePassword"><Property name="jetty.keystore.password" default="123456"/></Set>
<Set name="KeyManagerPassword"><Property name="jetty.keymanager.password" default="123456"/></Set>
<Set name="TrustStorePath"><Property name="jetty.base" default="." />/<Property name="jetty.truststore" default="etc/tomcat.keystore"/></Set>
<Set name="TrustStorePassword"><Property name="jetty.truststore.password" default="123456"/></Set>
<Set name="EndpointIdentificationAlgorithm"></Set>
<Set name="NeedClientAuth"><Property name="jetty.ssl.needClientAuth" default="false"/></Set>
<Set name="WantClientAuth"><Property name="jetty.ssl.wantClientAuth" default="false"/></Set>
<Set name="ExcludeCipherSuites">
<Array type="String">
<Item>SSL_RSA_WITH_DES_CBC_SHA</Item>
<Item>SSL_DHE_RSA_WITH_DES_CBC_SHA</Item>
<Item>SSL_DHE_DSS_WITH_DES_CBC_SHA</Item>
<Item>SSL_RSA_EXPORT_WITH_RC4_40_MD5</Item>
<Item>SSL_RSA_EXPORT_WITH_DES40_CBC_SHA</Item>
<Item>SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA</Item>
<Item>SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA</Item>
</Array>
</Set>
...

5、cd到jetty目录运行

jdk1.8/bin/java -Xmx1024m -Dxwiki.data.dir=data -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=data -Djetty.home=jetty -Djetty.base=data/jetty -Dfile.encoding=UTF8 -Djetty.port=8080 -jar jetty/start.jar --add-to-startd=https --module=xwiki jetty.port=8080 STOP.KEY=xwiki STOP.PORT=8079

6、修改 data\jetty\start.d下https.ini

# ---------------------------------------
# Module: https
--module=https
## HTTPS Configuration
# HTTP port to listen on
https.port=443
# HTTPS idle timeout in milliseconds
https.timeout=30000
# HTTPS Socket.soLingerTime in seconds. (-1 to disable)
# https.soLingerTime=-1

7、修改 data\jetty\start.d下ssl.ini
8443改成443
jetty.secure.port=443

8、运行start_xwiki.sh

9、到此jetty下启用https成功，nginx代理时，转到https即可！