Password defaults in jetty-ssl-context.xml should be removed

[joakime]

Currently the etc/jetty-ssl-context.xml has defaults for some of the passwords for the keystore.

There should be no password defaults.

Also, the SslContextFactory should produce meaningful errors if the passwords are invalid/incorrect.

[gregw]

Note that we want the demo keystore to work without the user needing to edit files. Perhaps move passwords and keystore file itself to a testssl module?

…

On 14 Jun 2017 23:19, "Joakim Erdfelt" ***@***.***> wrote: Currently the etc/jetty-ssl-context.xml <https://github.com/eclipse/jetty.project/blob/jetty-9.4.6.v20170531/jetty-server/src/main/config/etc/jetty-ssl-context.xml> has defaults for some of the passwords for the keystore. There should be no password defaults. Also, the SslContextFactory should produce meaningful errors if the passwords are invalid/incorrect. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#1615>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAEUrQOd3-j1xgjZ2q3s_V-rR9EzqRwoks5sEE5jgaJpZM4N6dL-> .

[gregw]

@WalkerWatch Can you check these changes and update doco?

[WalkerWatch]

@gregw Sure thing. I will make sure to include as part of #1677 as well

[WalkerWatch]

@gregw From a feature standpoint this looks good and it works. If you want to go ahead and merge it, that'd be great. I will make sure it ends up documented.

[stale]

This issue has been automatically marked as stale because it has been a full year without activity. It will be closed if no further activity occurs. Thank you for your contributions.

[lachlan-roberts]

We now have the test-keystore module for Jetty 10 and the default passwords have been removed elsewhere.

Leaving open issue #4228 for the documentation of this change.