Is it possible to change the keystore path or password without restarting Jetty about jetty.project HOT 3 CLOSED

You would need a custom Jetty bean to trigger your custom code, and a Jetty module that defines any dependencies to other modules (like ssl), along with an XML entry. Then you would have an XML to add the bean to the Server or SslContextFactory.

Similar to

• https://github.com/jetty/jetty.project/blob/jetty-12.0.x/jetty-core/jetty-server/src/main/config/modules/ssl-reload.mod
• https://github.com/jetty/jetty.project/blob/jetty-12.0.x/jetty-core/jetty-server/src/main/config/etc/jetty-ssl-context-reload.xml
• https://github.com/jetty/jetty.project/blob/jetty-12.0.x/jetty-core/jetty-util/src/main/java/org/eclipse/jetty/util/ssl/KeyStoreScanner.java

from jetty.project.

Sounds very custom.

If you have access to the SslContextFactory in your code, you can do the following.

SslContextFactory.Server sslContextFactory = getSslContextFactory();

sslContextFactory.reload(ssl ->
{
    ssl.setKeyStorePath("/path/to/alt/keystore.p12");
    ssl.setKeyStorePassword("storepwd");
    ssl.setTrustStorePath("/path/to/alt/truststore.p12");
    ssl.setTrustStorePassword("storepwd");
    // and any other things you want the SslContextFacotry to change
    ssl.setEndpointIdentificationAlgorithm(null);
});

Up to you to determine how to trigger that code.

from jetty.project.

I am running standalone Jetty using XML configuration. Is it possible to do something similar there ?

from jetty.project.