Hi Christian

I was able to deploy basex.war (8.6.7) as expanded application under a server on WebSphere Liberty.
The server is setup to use https with SSL.
So I can run with success the  BaseX Web Admin UI like https://localhost:9443/BaseX/dba/login?path=databasesand I can run Xquery from there.

The question is that the web application starts an instance of BaseXServerthat listen to 1984 port and that communication is not secure.
I take that the BaseXServer will not change to provide a secure communication with the clients. is that correct?

thanks
Stefania



From:        "Christian Grün" <christian.gruen@gmail.com>
To:        Giavanna J Richards <gjrichar@us.ibm.com>
Cc:        BaseX <basex-talk@mailman.uni-konstanz.de>
Date:        03/14/2018 04:07 PM
Subject:        Re: [basex-talk] SSL support for BaseX REST API
Sent by:        basex-talk-bounces@mailman.uni-konstanz.de



Hi Giavanna,

The SSL features has not been maintained anymore for a while now. With
BaseX 9.0, it will be completely removed, because the old solution is
not compatible anymore with Jetty 9. We may introduce it in future
once we find a good way to do. There is a StackOverflow question that
relates to this issue [1], but no helpful answer was given so far.
Suggestions from users who use Jetty and SSL are welcome.

All the best,
Christian

[1] https://urldefense.proofpoint.com/v2/url?u=https-3A__stackoverflow.com_questions_32734920_using-2Djetty-2D9-2Dand-2Djetty-2Dxml-2Dwith-2Dbasex&d=DwIBaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=oRDtJNjvHAlLIcU_p2eWUQ&m=0zOMGLkzQSB6QaWTNy6iglmqul82FpjptqdbW_cd-C4&s=MrN3jqfbFo0BjpvF2-MVajpuZBNOeAp7D1KFAiQQy5k&e=




On Wed, Mar 14, 2018 at 8:18 PM, Giavanna J Richards
<gjrichar@us.ibm.com> wrote:
> I'm trying to determine how to enable SSL communications with the BaseX
> server,  I have a java server which communicates with BaseX over its REST
> API for running xquery's.  I see in the BaseX changelog that SSL support was
> added to version 7.5 in 2012 but I haven't been able to find any references
> to it in the documentation.
>
> I found some statements in the jetty.xml file which are commented out and
> would appear to enable SSL on port 8986.  But I'm not at all familiar with
> jetty.  Is there some documentation available for enabling this support?
>
> Thanks in advance!
>
> Giavanna Richards