Hudson service https for secure logins

[James Simpson]

Hello,

I am running Hudson as a service on my ubuntu install, it is using an
LDAP server to allow everyone to login with their windows credentials.
As a result we want our hudson server to run under HTTPS to make sure
that logins using these windows logins are lovely and secure.

What would be the easiest way to get the hudson service to use https?

Cheers

[Nord, James]

Create a self signed cert using the java keytool and

Java -jar hudson.war --httpsPort=443 --httpsKeyStore=/path/to/keystore --httpsKeyStorePassword=myPassowrd

/James

Hello,

Cheers

**************************************************************************************
This message is confidential and intended only for the addressee. If you have received this message in error, please immediately notify the postm...@nds.com and delete it from your system as well as any copies. The content of e-mails as well as traffic data may be monitored by NDS for employment and security purposes. To protect the environment please do not print this e-mail unless necessary.

NDS Limited. Registered Office: One London Road, Staines, Middlesex, TW18 4EX, United Kingdom. A company registered in England and Wales. Registered no. 3080780. VAT no. GB 603 8808 40-00
**************************************************************************************

[Alain]

Hi I tried to start hudson with these parameters, but if i tray to
connect via https it give to me ssl error..
my hudson args:
HUDSON_ARGS="--webroot=/var/run/hudson/war --httpPort=$HTTPS_PORT --
ajp13Port=$AJP_PORT --prefix=/myHudson --httpsKeyStore=/home/svnuser/
keystore.jks --httpsKeyStorePassword=...."

At start up no hudson error in hudsonlogs

Does anybody had same problems?

Alain

On 16 Dic 2010, 18:42, "Nord, James" <JN...@nds.com> wrote:
> Create a self signed cert using the java keytool and
>
> Java -jar hudson.war --httpsPort=443 --httpsKeyStore=/path/to/keystore --httpsKeyStorePassword=myPassowrd
>
> /James
>
> -----Original Message-----
> From: hudson...@googlegroups.com [mailto:hudson...@googlegroups.com] On Behalf Of James Simpson
> Sent: 16 December 2010 16:28
> To: Hudson Users
> Subject: Hudson servicehttpsfor secure logins
>
> Hello,
>
> I am running Hudson as a service on my ubuntu install, it is using an LDAP server to allow everyone to login with their windows credentials.

> As a result we want our hudson server to run underHTTPSto make sure that logins using these windows logins are lovely and secure.

>
> What would be the easiest way to get the hudson service to usehttps?
>
> Cheers
>
> **************************************************************************************

> This message is confidential and intended only for the addressee. If you have received this message in error, please immediately notify the postmas...@nds.com and delete it from your system as well as any copies. The content of e-mails as well as traffic data may be monitored by NDS for employment and security purposes. To protect the environment please do not print this e-mail unless necessary.

[Richard Bywater]

---------- Forwarded message ----------
From: Richard Bywater <rbyw...@gmail.com>
Date: Wed, Feb 2, 2011 at 9:20 AM
Subject: Re: Hudson service https for secure logins
To: hudson...@googlegroups.com

Do you mean your browser gives you an SSL error or Hudson does?

If its a self-signed certificate, you'll need to install it on your PC
to avoid the SSL error on browsers...

Richard.

[Kohsuke Kawaguchi]

Note that if you are OK with a self-signed certificate, you can just let
Jenkins generate one:

$ java -jar hudson.war --httpsPort=443

No need to do the messy keytool stuff or anything.

--
Kohsuke Kawaguchi | CloudBees, Inc. | http://cloudbees.com/

[Alain]

Happens that hudson anyway respond only at http request, if I do an
https request, hudson doesnt answers.
In any case: if I put only --httpsPort=8443 or i put --httpsKeyStore=/
path/to/keystore --httpsKeyStorePassword=myPassowrd in my HUDSON_ARGS

On 2 Feb, 03:33, Kohsuke Kawaguchi <kkawagu...@cloudbees.com> wrote:
> Note that if you are OK with a self-signed certificate, you can just let
> Jenkins generate one:
>
> $ java -jar hudson.war --httpsPort=443
>
> No need to do the messy keytool stuff or anything.
>
> On 12/16/2010 09:42 AM, Nord, James wrote:
>
>
>
> > Create a self signed cert using the java keytool and
>
> > Java -jar hudson.war --httpsPort=443 --httpsKeyStore=/path/to/keystore --httpsKeyStorePassword=myPassowrd
>
> > /James
>
> > -----Original Message-----
> > From: hudson...@googlegroups.com [mailto:hudson...@googlegroups.com] On Behalf Of James Simpson
> > Sent: 16 December 2010 16:28
> > To: Hudson Users
> > Subject: Hudson service https for secure logins
>
> > Hello,
>
> > I am running Hudson as a service on my ubuntu install, it is using an LDAP server to allow everyone to login with their windows credentials.
> > As a result we want our hudson server to run under HTTPS to make sure that logins using these windows logins are lovely and secure.
>
> > What would be the easiest way to get the hudson service to use https?
>
> > Cheers
>
> > **************************************************************************************

> > This message is confidential and intended only for the addressee. If you have received this message in error, please immediately notify the postmas...@nds.com and delete it from your system as well as any copies. The content of e-mails as well as traffic data may be monitored by NDS for employment and security purposes. To protect the environment please do not print this e-mail unless necessary.

[Alain]

I found my error: was a mistype httpPort instead of httpsPort...
sorry.

Anyway still during navigarion in Hudson appear thi message:
"It appears that your reverse proxy set up is broken" and connection
continue on http and not https.. and its a problem if i want to close
port 80...

[Justin Doehling]

Does this require restarting Hudson afterward for the settings to take affect?