Installing IG in Jetty

Install Jetty, and set up the location for the Jetty distribution binaries:

1. Download a supported version of Jetty server from its download page, and install it to /path/to/jetty.

2. Set the environment variable JETTY_HOME for /path/to/jetty:

   $ export JETTY_HOME=/path/to/jetty

Set up the location for configurations and customizations to the Jetty distribution:

1. Create a directory /path/to/jetty_base.

2. Set the environment variable JETTY_BASE for /path/to/jetty_base:

   $ export JETTY_BASE=/path/to/jetty_base

Set up the keystore:

1. Remove the built-in keystore:

   $ rm ${JETTY_HOME}/modules/ssl/keystore

2. Generate a key pair with a self-signed certificate in the keystore:

   $ keytool \
   -genkey \
   -alias jetty \
   -keyalg RSA \
   -keystore ${JETTY_HOME}/modules/ssl/keystore \
   -storepass password \
   -keypass password \
   -dname "CN=openig.example.com,O=Example Corp,C=FR"

   Note

   Because KeyStore converts all characters in its key aliases to lower case, use only lowercase in alias definitions of a KeyStore.

Create a directory to store local server customization and configurations in ${JETTY_BASE}:

1. Delete the global start.ini:

   $ rm ${JETTY_HOME}/start.ini

2. From ${JETTY_BASE}, create the start.d folder to hold the module .ini files:

   $ cd ${JETTY_BASE}
   $ java -jar ${JETTY_HOME}/start.jar --create-startd
   MKDIR : ${jetty.base}/start.d
   INFO  : Base directory was modified

From ${JETTY_BASE}, add the following Jetty configuration modules:

$ cd ${JETTY_BASE}
$ java  -jar ${JETTY_HOME}/start.jar \
--add-to-start=server,webapp,deploy,ssl,jstl,ext,jsp,resources,console-capture,http,https
INFO  : webapp          initialized in ${jetty.base}/start.d/webapp.ini
INFO  : ext             initialized in ${jetty.base}/start.d/ext.ini
INFO  : server          initialized in ${jetty.base}/start.d/server.ini
INFO  : mail            transitively enabled
INFO  : servlet         transitively enabled
INFO  : jsp             initialized in ${jetty.base}/start.d/jsp.ini
INFO  : annotations     transitively enabled
INFO  : resources       initialized in ${jetty.base}/start.d/resources.ini
INFO  : transactions    transitively enabled
INFO  : threadpool      transitively enabled, ini template available with --add-to-start=threadpool
INFO  : ssl             initialized in ${jetty.base}/start.d/ssl.ini
INFO  : plus            transitively enabled
INFO  : deploy          initialized in ${jetty.base}/start.d/deploy.ini
INFO  : jstl            initialized in ${jetty.base}/start.d/jstl.ini
INFO  : security        transitively enabled
INFO  : apache-jsp      transitively enabled
INFO  : jndi            transitively enabled
INFO  : console-capture initialized in ${jetty.base}/start.d/console-capture.ini
INFO  : apache-jstl     transitively enabled
INFO  : http            initialized in ${jetty.base}/start.d/http.ini
INFO  : client          transitively enabled
INFO  : https           initialized in ${jetty.base}/start.d/https.ini
INFO  : bytebufferpool  transitively enabled, ini template available with --add-to-start=bytebufferpool
MKDIR : ${jetty.base}/lib
MKDIR : ${jetty.base}/lib/ext
MKDIR : ${jetty.base}/resources
MKDIR : ${jetty.base}/etc
COPY  : ${jetty.home}/modules/ssl/keystore to ${jetty.base}/etc/keystore
MKDIR : ${jetty.base}/webapps
MKDIR : ${jetty.base}/logs
INFO  : Base directory was modified

Replace jetty-util-*.jar with the version for your installation, and find the obfuscated form of the keystore password:

$ cd ${JETTY_HOME}/lib
$ ls jetty-util-*.jar

$ java -cp jetty-util-*.jar org.eclipse.jetty.util.security.Password password

password
OBF:1v2j1uum1xtv1zej1zer1xtn1uvk1v1v
MD5:5f4dcc3b5aa765d61d8327deb882cf99

In ${JETTY_BASE}/start.d/ssl.ini, uncomment the following lines, and update the passwords with the OBF password returned in the previous step:

## Connector port to listen on
jetty.ssl.port=8443

## Keystore file path (relative to $jetty.base)
jetty.sslContext.keyStorePath=etc/keystore

## Keystore password
jetty.sslContext.keyStorePassword=OBF:1v2j1uum1xtv1zej1zer1xtn1uvk1v1v

## KeyManager password
jetty.sslContext.keyManagerPassword=OBF:1v2j1uum1xtv1zej1zer1xtn1uvk1v1v

Copy the IG .war file to ${JETTY_BASE}/webapps/IG-7.0.2.war.

Go to ${JETTY_BASE}, and start Jetty:

$ cd ${JETTY_BASE}
$ java -jar ${JETTY_HOME}/start.jar

Access the IG welcome page on https://openig.example.com:8443.

If you see warnings that the site is not secure, or that the self-signed certificate is not valid, respond to the warnings to access the site.