JOC Cockpit - HTTPS Authentication

Scope

• The connection to the JOC Cockpit can be secured by HTTPS.
• The connection to the JobScheduler Master can be secured by HTTPS.
• This article describes the steps required to set up secure HTTPS communication in Jetty and in the JobScheduler Master.

Prerequisites

The only prerequisite is to have the Java keytools installed with your Java JRE.

General

The article uses JOC_HOME, JETTY_HOME and JETTY_BASE as environment variables which locate three directories. If you installed Jetty with the JOC installer then

• JOC_HOME is the installation path which was specified during the JOC installation
  
  • C:\Program Files\sos-berlin.com\joc (default on Windows)
  • /opt/sos-berlin.com/joc (default on Linux)
• JETTY_HOME = JOC_HOME/jetty
• JETTY_BASE is Jetty's base directory which was specified during the JOC installation
  
  • C:\ProgramData\sos-berlin.com\joc (default on Windows)
  • /home/<setup-user>/sos-berlin.com/joc (default on Linux)
    
    

Set up a secure connection to JOC Cockpit as a web application in Jetty

Step 1: Add the https module in Jetty

• add https module on Windows

  java -jar "%JETTY_HOME%\start.jar" -Djetty.home="%JETTY_HOME%" -Djetty.base="%JETTY_BASE%" --add-to-start=https

  add https module on Linux

  java -jar "$JETTY_HOME/start.jar" -Djetty.home="$JETTY_HOME" -Djetty.base="$JETTY_BASE" --add-to-start=https