configuring jmx-remote module to use SSL

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

configuring jmx-remote module to use SSL

Brian Reichert
There was a thread back in February, where I recieved terrific help
about standing up a JMX interface over SSL.

I'm now exploring a varient of that topic, using the 'jmx-remote'
module instead of the 'jmx' module.

This seems straightforward, based on this document:

  http://www.eclipse.org/jetty/documentation/9.4.x/jmx-chapter.html

However, I'm running 9.3.8.v20160314, and the 9.3.x version of this
doc doesn't call out SSL at all:

  http://www.eclipse.org/jetty/documentation/9.3.x/jmx-chapter.html

When I try to employ the 9.4.x convention on my 9.3.x service, it
blows up, perhaps unsurpisingly:

    2017-06-21 21:23:47.862:WARN:oejx.XmlConfiguration:main: Config error at
  <Call name="addBean"><Arg>|?<New id="ConnectorServer"
  class="org.eclipse.jetty.jmx.ConnectorServer"><Arg>|    <New
  class="javax.management.remote.JMXServiceURL"><Arg
  type="java.lang.String">rmi</Arg><Arg type="java.lang.String"/><Arg
  type="java.lang.Integer">1099</Arg><Arg
  type="java.lang.String">/jndi/rmi:///jmxrmi</Arg></New>|
  </Arg><Arg/><Arg>org.eclipse.jetty.jmx:name=rmiconnectorserver</Arg><Arg><Ref
  refid="sslContextFactory"/></Arg></New>|    </Arg></Call>
  java.lang.IllegalStateException: No suitable constructor: <New
  id="ConnectorServer" class="org.eclipse.jetty.jmx.ConnectorServer"><Arg>

Is there a 9.3.x mechanism for configuring the 'jmx-remote' module
to use SSL?

--
Brian Reichert <[hidden email]>
BSD admin/developer at large
_______________________________________________
jetty-users mailing list
[hidden email]
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users
Reply | Threaded
Open this post in threaded view
|

Re: configuring jmx-remote module to use SSL

Greg Wilkins
Nope sorry.  

This was a feature added only recently to jetty-9.4.x in https://github.com/eclipse/jetty.project/issues/1517

No plans to backport to 9.3... which we really really want to make go end of life (java 7 has been EOL for sometime). 

cheers


On 21 June 2017 at 23:16, Brian Reichert <[hidden email]> wrote:
There was a thread back in February, where I recieved terrific help
about standing up a JMX interface over SSL.

I'm now exploring a varient of that topic, using the 'jmx-remote'
module instead of the 'jmx' module.

This seems straightforward, based on this document:

  http://www.eclipse.org/jetty/documentation/9.4.x/jmx-chapter.html

However, I'm running 9.3.8.v20160314, and the 9.3.x version of this
doc doesn't call out SSL at all:

  http://www.eclipse.org/jetty/documentation/9.3.x/jmx-chapter.html

When I try to employ the 9.4.x convention on my 9.3.x service, it
blows up, perhaps unsurpisingly:

    2017-06-21 21:23:47.862:WARN:oejx.XmlConfiguration:main: Config error at
  <Call name="addBean"><Arg>|?<New id="ConnectorServer"
  class="org.eclipse.jetty.jmx.ConnectorServer"><Arg>|    <New
  class="javax.management.remote.JMXServiceURL"><Arg
  type="java.lang.String">rmi</Arg><Arg type="java.lang.String"/><Arg
  type="java.lang.Integer">1099</Arg><Arg
  type="java.lang.String">/jndi/rmi:///jmxrmi</Arg></New>|
  </Arg><Arg/><Arg>org.eclipse.jetty.jmx:name=rmiconnectorserver</Arg><Arg><Ref
  refid="sslContextFactory"/></Arg></New>|    </Arg></Call>
  java.lang.IllegalStateException: No suitable constructor: <New
  id="ConnectorServer" class="org.eclipse.jetty.jmx.ConnectorServer"><Arg>

Is there a 9.3.x mechanism for configuring the 'jmx-remote' module
to use SSL?

--
Brian Reichert                          <[hidden email]>
BSD admin/developer at large
_______________________________________________
jetty-users mailing list
[hidden email]
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users



--

_______________________________________________
jetty-users mailing list
[hidden email]
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users
Reply | Threaded
Open this post in threaded view
|

Re: configuring jmx-remote module to use SSL

Brian Reichert
On Thu, Jun 22, 2017 at 11:16:45AM +0200, Greg Wilkins wrote:
> Nope sorry.
>
> This was a feature added only recently to jetty-9.4.x in
> https://github.com/eclipse/jetty.project/issues/1517
>
> No plans to backport to 9.3... which we really really want to make go end
> of life (java 7 has been EOL for sometime).

No prob; thanks for the confirmation.

> cheers

--
Brian Reichert <[hidden email]>
BSD admin/developer at large
_______________________________________________
jetty-users mailing list
[hidden email]
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users