XWiki Enterprise 8.4.5 using HTTPS steps

Note:

Do backup before you operate
The following jetty non-generic jetty are jetty or XWiki under the XWiki folder Data\jetty

1. Prepare the KeyStore key. Copy to the DATA\JETTY\ETC directory

2, modify the jetty directory (note: non-data\jetty) etc under the Jetty.xml

HTTP changed to https,8443 to 443
<set name= "Securescheme" >https</Set>
<set name= "Secureport" ><property name= "Jetty.secure.port" default= "443"/></set>

3, modify the jetty directory (note: non-data\jetty) etc under the Jetty-https.xml

8443 Change to 443
<set name= "Port" ><property name= "Https.port" default= "443"/></set>

4, modify the jetty directory (note: non-data\jetty) etc under the Jetty-ssl.xml

Where Tomcat.keystore is the key and 123456 is the key password.

<configure id= "Sslcontextfactory" class= "Org.eclipse.jetty.util.ssl.SslContextFactory" >
<set name= "Keystorepath" ><property name= "Jetty.base" default= "."/>/<property name= "Jetty.keystore" default= "Etc/tomcat.keystore"/></set>
<set name= "Keystorepassword" ><property name= "Jetty.keystore.password" default= "123456"/></set>
<set name= "Keymanagerpassword" ><property name= "Jetty.keymanager.password" default= "123456"/></set >
<set name= "Truststorepath" ><property name= "Jetty.base" default= "."/>/<property name= " Jetty.truststore "default=" Etc/tomcat.keystore "/></set>
<set name= "Truststorepassword" ><property name= "Jetty.truststore.password" default= "123456"/></set >
<set name= "Endpointidentificationalgorithm" ></Set>
<set name= "Needclientauth" ><property name= "Jetty.ssl.needClientAuth" default= "false"/></set>
<set name= "Wantclientauth" ><property name= "Jetty.ssl.wantClientAuth" default= "false"/></set>
<set name= "Excludeciphersuites" >
<array type= "String" >
<Item>SSL_RSA_WITH_DES_CBC_SHA</Item>
<Item>SSL_DHE_RSA_WITH_DES_CBC_SHA</Item>
<Item>SSL_DHE_DSS_WITH_DES_CBC_SHA</Item>
<Item>SSL_RSA_EXPORT_WITH_RC4_40_MD5</Item>
<Item>SSL_RSA_EXPORT_WITH_DES40_CBC_SHA</Item>
<Item>SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA</Item>
<Item>SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA</Item>
</Array>
</Set>
...

5, CD to jetty directory run

Jdk1.8/bin/java-xmx1024m-dxwiki.data.dir=data-xx:+heapdumponoutofmemoryerror-xx:heapdumppath=data-djetty.home= Jetty-djetty.base=data/jetty-dfile.encoding=utf8-djetty.port=8080-jar Jetty/start.jar--add-to-startd=https-- Module=xwiki jetty.port=8080 STOP. Key=xwiki STOP. port=8079

6, modify DATA\JETTY\START.D under Https.ini

# ---------------------------------------
# Module:https
--module=https
# # HTTPS Configuration
# HTTP Port to listen on
https.port=443
# HTTPS idle timeout in milliseconds
https.timeout=30000
# HTTPS Socket.solingertime in seconds. ( -1 to disable)
# Https.solingertime=-1

7, modify DATA\JETTY\START.D under Ssl.ini
8443 Change to 443
jetty.secure.port=443

8. Running start_xwiki.sh

9, to this jetty to enable HTTPS success, Nginx agent, go to HTTPS!

XWiki Enterprise 8.4.5 using HTTPS steps