{ "componentChunkName": "component---src-templates-doc-tsx", "path": "/docs/2.8.x/en/administration/scm-server/", "result": {"data":{"navigation":{"nodes":[{"section":"Getting started","entries":[{"frontmatter":{"title":"Installation","subtitle":"Installation of scm-manager","partiallyActive":true},"fields":{"slug":"/docs/2.8.x/en/installation/"}},{"frontmatter":{"title":"Migrate from v1 to v2","subtitle":"How to use the Migration-Wizard","partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/migrate-scm-manager-from-v1/"}},{"frontmatter":{"title":"Import existing repositories","subtitle":"How to import existing repositories into SCM-Manager","partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/import/"}},{"frontmatter":{"title":"Frequently Asked Questions","subtitle":null,"partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/faq/"}},{"frontmatter":{"title":"Known Issues","subtitle":null,"partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/known-issues/"}}]},{"section":"User-oriented","entries":[{"frontmatter":{"title":"Repository","subtitle":null,"partiallyActive":true},"fields":{"slug":"/docs/2.8.x/en/user/repo/"}},{"frontmatter":{"title":"User","subtitle":null,"partiallyActive":true},"fields":{"slug":"/docs/2.8.x/en/user/user/"}},{"frontmatter":{"title":"Groups","subtitle":null,"partiallyActive":true},"fields":{"slug":"/docs/2.8.x/en/user/group/"}},{"frontmatter":{"title":"Administration","subtitle":null,"partiallyActive":true},"fields":{"slug":"/docs/2.8.x/en/user/admin/"}},{"frontmatter":{"title":"Profile","subtitle":null,"partiallyActive":true},"fields":{"slug":"/docs/2.8.x/en/user/profile/"}}]},{"section":"Administration","entries":[{"frontmatter":{"title":"Base Directory","subtitle":null,"partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/administration/basedirectory/"}},{"frontmatter":{"title":"Logging","subtitle":"Configuration and locations of SCM-Manager logging","partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/administration/logging/"}},{"frontmatter":{"title":"SCM-Server Configuration","subtitle":"Various configuration options for the SCM-Server","partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/administration/scm-server/"}},{"frontmatter":{"title":"Reverse Proxy","subtitle":"How to use SCM-Manager with common reverse proxies","partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/administration/reverse-proxies/"}}]},{"section":"Development","entries":[{"frontmatter":{"title":"Intellij IDEA Configuration","subtitle":null,"partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/intellij-idea-configuration/"}},{"frontmatter":{"title":"Building SCM-Manager from source","subtitle":null,"partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/build-from-source/"}},{"frontmatter":{"title":"Common pitfall occurred while developing the SCM V2","subtitle":null,"partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/ui-common-pitfall/"}},{"frontmatter":{"title":"Permission Concept","subtitle":"Fine-grained permission for SCM-Manager v2","partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/permission-concept/"}},{"frontmatter":{"title":"Error Handling","subtitle":null,"partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/error-handling/"}},{"frontmatter":{"title":"I18n","subtitle":"Howto do internationalization","partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/i18n/"}},{"frontmatter":{"title":"Definition of Done","subtitle":null,"partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/definition-of-done/"}},{"frontmatter":{"title":"DOD for UI development","subtitle":null,"partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/ui-dod/"}},{"frontmatter":{"title":"Decision Table","subtitle":null,"partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/decision-table/"}},{"frontmatter":{"title":"Integration Tests","subtitle":"How to run integration tests","partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/integration-tests/"}}]},{"section":"Plugin Development","entries":[{"frontmatter":{"title":"Create a plugin","subtitle":"Create a plugin from Maven Archetype","partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/plugins/create/"}},{"frontmatter":{"title":"Migrate a v1 plugin","subtitle":null,"partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/plugins/migrate-plugin-from-v1/"}},{"frontmatter":{"title":"Extension Points","subtitle":null,"partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/plugins/extension-points/"}},{"frontmatter":{"title":"i18n for Plugins","subtitle":null,"partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/plugins/i18n-for-plugins/"}},{"frontmatter":{"title":"Plugin Descriptor","subtitle":null,"partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/plugins/plugin-descriptor/"}},{"frontmatter":{"title":"SCM-Manager v2 Plugin Development","subtitle":null,"partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/plugins/plugin-development/"}},{"frontmatter":{"title":"Publish","subtitle":"Publish your Plugin","partiallyActive":null},"fields":{"slug":"/docs/2.8.x/en/development/plugins/publish/"}}]}]},"versions":{"group":[{"fieldValue":"1.0.x"},{"fieldValue":"1.x"},{"fieldValue":"2.0.x"},{"fieldValue":"2.1.x"},{"fieldValue":"2.10.x"},{"fieldValue":"2.11.x"},{"fieldValue":"2.12.x"},{"fieldValue":"2.13.x"},{"fieldValue":"2.14.x"},{"fieldValue":"2.15.x"},{"fieldValue":"2.16.x"},{"fieldValue":"2.17.x"},{"fieldValue":"2.18.x"},{"fieldValue":"2.19.x"},{"fieldValue":"2.2.x"},{"fieldValue":"2.20.x"},{"fieldValue":"2.21.x"},{"fieldValue":"2.22.x"},{"fieldValue":"2.23.x"},{"fieldValue":"2.24.x"},{"fieldValue":"2.25.x"},{"fieldValue":"2.26.x"},{"fieldValue":"2.27.x"},{"fieldValue":"2.28.x"},{"fieldValue":"2.29.x"},{"fieldValue":"2.3.x"},{"fieldValue":"2.30.x"},{"fieldValue":"2.31.x"},{"fieldValue":"2.32.x"},{"fieldValue":"2.33.x"},{"fieldValue":"2.34.x"},{"fieldValue":"2.35.x"},{"fieldValue":"2.36.x"},{"fieldValue":"2.37.x"},{"fieldValue":"2.38.x"},{"fieldValue":"2.39.x"},{"fieldValue":"2.4.x"},{"fieldValue":"2.40.x"},{"fieldValue":"2.41.x"},{"fieldValue":"2.42.x"},{"fieldValue":"2.43.x"},{"fieldValue":"2.44.x"},{"fieldValue":"2.45.x"},{"fieldValue":"2.46.x"},{"fieldValue":"2.47.x"},{"fieldValue":"2.48.x"},{"fieldValue":"2.5.x"},{"fieldValue":"2.6.x"},{"fieldValue":"2.7.x"},{"fieldValue":"2.8.x"},{"fieldValue":"2.9.x"},{"fieldValue":"3.0.x"},{"fieldValue":"3.1.x"},{"fieldValue":"3.10.x"},{"fieldValue":"3.11.x"},{"fieldValue":"3.2.x"},{"fieldValue":"3.3.x"},{"fieldValue":"3.4.x"},{"fieldValue":"3.5.x"},{"fieldValue":"3.6.x"},{"fieldValue":"3.7.x"},{"fieldValue":"3.8.x"},{"fieldValue":"3.9.x"}]},"languages":{"group":[{"fieldValue":"de"},{"fieldValue":"en"}]},"markdownRemark":{"html":"

Https

\n

In order to use https with scm-server, you need a keystore with a certificate and the corresponding secret key.\nIn the following we will use openssl to create a self signed certificate for demonstration purposes.

\n

Create self signed certificate

\n

Warning: Do not use self signed certificates in production, this is only for demonstration purposes.

\n
openssl req -new -x509 -newkey rsa:2048 -sha256 -keyout tls.key -out tls.crt
\n

This command will ask a few questions about metadata for generated certificate:

\n\n

Make sure that the common name matches the fqdn, which you are using to access SCM-Manager.

\n

Browsers

\n

In order to use a self signed certificate the certificate must be imported into you browser.

\n

Configure Git

\n

To use git with a self signed certificate, we have to add the certificate path to the configuration.

\n
git config http.sslCAInfo /complete/path/to/tls.crt
\n

Configure Mercurial

\n

To use mercurial with a self signed certificate, we have to add the certificate path to the configuration.

\n
[web]\ncacerts = /complete/path/to/cert.pem
\n

Create keystore

\n

Create a keystore in pkcs12 format.\nThis command can be used with the self signed certificate from above or with a valid certificate from an authority.

\n
openssl pkcs12 -inkey tls.key -in tls.crt -export -out keystore.pkcs12
\n

If your secret key is protected with a pass phrase, you have to enter it first.\nThan you have to enter an export password to protect your keystore.

\n

Server configuration

\n

Add the following snippet at the end of your server-config.xml, be sure it is inside the Configure tag:

\n
<!-- ssl configuration start -->\n\n<New id=\"sslContextFactory\" class=\"org.eclipse.jetty.util.ssl.SslContextFactory$Server\">\n  <!-- \n    path to your keystore, it can be a java keystore or in the pkcs12 format\n  -->\n  <Set name=\"KeyStorePath\">\n    <SystemProperty name=\"basedir\" default=\".\"/>/conf/keystore.pkcs12\n  </Set>\n  <!--\n    use pkcs12 or jks for java keystore\n  -->\n  <Set name=\"KeyStoreType\">PKCS12</Set>\n  <!--\n    the password of you keystore\n  -->\n  <Set name=\"KeyStorePassword\">secret</Set>\n\n  <!--\n    For a more up to date list of ciphers and protocols, have a look at the mozilla ssl configurator:\n    https://ssl-config.mozilla.org/#server=jetty&version=9.4.28&config=intermediate&guideline=5.4\n  -->\n\n  <!-- TLS 1.3 requires Java 11 or higher -->\n  <Set name=\"IncludeProtocols\">\n    <Array type=\"String\">\n        <Item>TLSv1.2</Item>\n        <Item>TLSv1.3</Item>\n    </Array>\n  </Set>\n\n  <Set name=\"IncludeCipherSuites\">\n    <Array type=\"String\">\n      <Item>TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384</Item>\n      <Item>TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</Item>\n      <Item>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</Item>\n      <Item>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</Item>\n      <Item>TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256</Item>\n      <Item>TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</Item>\n      <Item>TLS_DHE_RSA_WITH_AES_256_GCM_SHA384</Item>\n      <Item>TLS_DHE_RSA_WITH_AES_128_GCM_SHA256</Item>\n    </Array>\n  </Set>\n\n  <Set name=\"useCipherSuitesOrder\">\n    <Property name=\"jetty.sslContext.useCipherSuitesOrder\" default=\"false\" />\n  </Set>\n</New>\n\n<New id=\"sslHttpConfig\" class=\"org.eclipse.jetty.server.HttpConfiguration\">\n  <Arg>\n    <Ref refid=\"httpConfig\"/>\n  </Arg>\n  <Call name=\"addCustomizer\">\n    <Arg>\n      <New class=\"org.eclipse.jetty.server.SecureRequestCustomizer\">\n        <Arg name=\"sniRequired\" type=\"boolean\"><Property name=\"jetty.ssl.sniRequired\" default=\"false\"/></Arg>\n        <Arg name=\"sniHostCheck\" type=\"boolean\"><Property name=\"jetty.ssl.sniHostCheck\" default=\"true\"/></Arg>\n        <Arg name=\"stsMaxAgeSeconds\" type=\"int\"><Property name=\"jetty.ssl.stsMaxAgeSeconds\" default=\"-1\"/></Arg>\n        <Arg name=\"stsIncludeSubdomains\" type=\"boolean\"><Property name=\"jetty.ssl.stsIncludeSubdomains\" default=\"false\"/></Arg>\n      </New>\n    </Arg>\n  </Call>\n</New>\n\n<Call name=\"addConnector\">\n  <Arg>\n    <New id=\"sslConnector\" class=\"org.eclipse.jetty.server.ServerConnector\">\n      <Arg name=\"server\">\n        <Ref refid=\"ScmServer\" />\n      </Arg>\n      <Arg name=\"factories\">\n        <Array type=\"org.eclipse.jetty.server.ConnectionFactory\">\n          <Item>\n            <New class=\"org.eclipse.jetty.server.SslConnectionFactory\">\n              <Arg name=\"next\">http/1.1</Arg>\n              <Arg name=\"sslContextFactory\">\n                <Ref refid=\"sslContextFactory\"/>\n              </Arg>\n            </New>\n          </Item>\n          <Item>\n            <New class=\"org.eclipse.jetty.server.HttpConnectionFactory\">\n              <Arg name=\"config\">\n                <Ref refid=\"sslHttpConfig\" />\n              </Arg>\n            </New>\n          </Item>\n        </Array>\n      </Arg>\n      <!--\n        Address to listen 0.0.0.0 means on every interface\n      -->\n      <Set name=\"host\">\n        <SystemProperty name=\"jetty.host\" default=\"0.0.0.0\" />\n      </Set>\n      <!--\n        Port for the https connector\n      -->\n      <Set name=\"port\">\n        <Property name=\"jetty.ssl.port\" default=\"8443\" />\n      </Set>\n    </New>\n  </Arg>\n</Call>\n\n<!-- ssl configuration end -->
\n

The snipped above assumes your keystore is in the pkcs12 format and is stored at conf/keystore.pkcs12 with the password secret.\nYou have to tweek this settings to match your setup.\nAfter modifying your server-config.xml, you have to restart your SCM-Manager instance.\nNow SCM-Manager should open a second port with https (in the example above 8443).

","description":"Https In order to use https with scm-server, you need a keystore with a certificate and the corresponding secret key.\nIn the following we will use to create a…","tableOfContents":"","frontmatter":{"title":"SCM-Server Configuration","subtitle":"Various configuration options for the SCM-Server","displayToc":true,"description":null,"keywords":null,"image":null}}},"pageContext":{"slug":"/docs/2.8.x/en/administration/scm-server/","version":"2.8.x","latestVersion":"3.11.x","latestPageVersion":"3.11.x","language":"en","relativePath":"/administration/scm-server/","canonicalPath":"/docs/latest/en/administration/scm-server/","latestRootPath":"/docs/3.11.x/en/"}}, "staticQueryHashes": ["1973669194","2742214048","2956773653","2957019495","698804963"]}