I'll try to number the steps I've done so they are easier to refer to...

1. Obtained a wildcard certificate from a CA and installed into IIS7 using a CSR I generated in IIS7.

2. Used the Windows server certificate tool to export the public and private key which prompted me to generate a password for the pair.

3. Used openssl to convert the public/private key to the x509 format.

4. Used: 'keytool -keystore keystore -import -alias jetty -file my_cert.crt -trustcacerts' to import the certificate into Jetty (executed in C:\Program Files\Mingle\jre\bin).

! This also asked for a password and confirmation, so I entered the same info as step 2. This gave me a keystore file in the same folder, and gave me a message it was sucessfully entered into the store !

5. Added the following lines in jetty.xml:

    <Call name="addConnector">
        <Arg>
          <New class="org.mortbay.jetty.security.SslSocketConnector">
            <Set name="Port">443</Set>
            <Set name="maxIdleTime">30000</Set>           
            <Set name="keystore"><SystemProperty name="jetty.home" default="." />/jre/bin/keystore</Set>
            <Set name="password">mypassword</Set>
            <Set name="keyPassword">mypassword</Set>
            <Set name="truststore"><SystemProperty name="jetty.home" default="." />/jre/bin/keystore</Set>
            <Set name="trustPassword">mypassword</Set>
          </New>
        </Arg>
    </Call>

There are three password fields.... password, keyPassword, trustPassword, so I entered the same certificate password I used for step 2. and step 4. above in all three fields? What am I mising?

6. Since we run Mingle on a specific IP (sub-domain/port 80), seperate than IIS, I also specify the specific IP in the jetty.xml file in an additional addConnector section:

<Call name="addConnector">
      <Arg>
          <New class="org.mortbay.jetty.nio.SelectChannelConnector">
            <Set name="port"><SystemProperty name="mingle.port" default="80"/></Set>
            <Set name="maxIdleTime">30000</Set>
            <Set name="Acceptors">1</Set>
            <Set name="Host">***.***.***.***</Set>
            <Set name="statsOn">false</Set>
            <Set name="lowResourcesConnections">1000</Set>
              <Set name="lowResourcesMaxIdleTime">500</Set>
              <Set name="headerBufferSize">16384</Set>
          </New>
      </Arg>
    </Call>

When I have both these addConnector calls in the jetty.xml, I get the following in the log file:

[2009-06-09 07:15:25,399] [Thread-0] [org.mortbay.log] Started SelectChannelConnector@***.***.***.***:80
[2009-06-09 07:15:25,436] [Thread-0] [org.mortbay.log] Started SslSocketConnector@0.0.0.0:443

But... when I try either http and https with both these addConnector statements in the jetty.xml file, it just reels and reels, never connecting to Mingle. If I remove the SslSocketConnector connector, it works fine again.

Really my end goal is a single SSL connection through:

https://mingle.mydomain.com/

My questions are:

1.) Do I need both addConnector statements in jetty.xml?

2.) Do I need to specify my Mingle Host (IP) twice in the jetty.xml file (also in the SslSocketConnector section)?

3.) Do I need the confidentialPort Set in the SelectChannelConnector AddConnector section of jetty.xml? What do I set it to?

4.) Do I need to change the mingle.properties file. i.e. - Dmingle.memcachedPort or Dmingle.memcachedHost. Currently this is '11311' and 'localhost' respectively.

Any help is appreciated!

Thanks,

Thomas