RDK Resources
[*RDK Preferred*]
Code Management Facility
RDK Forums
[RDK Conferences]
RDK Support
Archives
Papers & Presentations Archive
In the Xconf RDK community instance , the data service and Admin UI is added standalone jetty services and both are deployed in the same VM. This documentation explains the steps that were followed to achieve it.
Table of Contents |
---|
...
cd /opt
mkdir jetty2
cd jetty2
wget https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-distribution/9.4.37.v20210219/jetty-distribution-9.4.37.v20210219.tar.gz /copy the tarball file from /opt/jetty
gzip –d jetty-distribution-9.4.37.v20210219.tar.gz
tar -xf jetty-distribution-9.4.37.v20210219.tar.gz--strip=1
(Or copy the jetty tar ball file from data service setup)
mv xconfAdminService2.war admin.war
--module=https
jetty.http.port=9093
etc/jetty-ssl.xml
-DappConfig=service.properties
cp bin/jetty.sh /etc/init.d/jetty2
Create the file /etc/default/jetty2 with the following data
vim /etc/default/jetty2
JETTY_HOME=/opt/jetty2
Before starting jetty as a service we can verify if the app is running by stepping opt/jetty2 and run the command java –jar start.jar –DappConfig=service.properties
sudo service jetty2 start
sudo service jetty2 status
After obtaining the certificate file from the CA follow the below steps for configuration:
We need to convert the crt file that is obtained from the CA to PKCS12 format. This can be done with the following steps:
...
After the above commands pfx or pkcs12 file will be generated.
We need to import the PKCS12 file in the keystore of Jetty.
...
Now we have created a new keystore and imported our PKCS12 file.
Jetty 9 has a modular architecture, which means that you can enable different modules through the configuration files.
...
java -cp jetty-util-9.4.37.v20210219.jar org.eclipse.jetty.util.security.Password <your password>
Jetty modules are configured through the XML files under JETTY_HOME/etc folder. By enabling these modules, we are activating jetty-ssl.xml and jetty-https.xml files.The following changes need to be done in the below files:
...