title: Debugging Jetty https
body: <p>I am setting up a standalone (not embedded) jetty 9.2.1 with https.</p>
  
  <p>I played a bit with a self-signed certificate on my local box and all went fine.</p>
  
  <p>Now I am setting up a uat server (similar to what I'll get in production), and I'm failing at getting the https running properly.
  These are my steps:</p>
  
  <p>1) I created a keystore, generated the cert request and submitted to my CA, got the signed certificate and imported both the new and root certificates in the keystore</p>
  
  <p>2) I can verify that the keystore is looking fine and by doing:</p>
  
  <pre><code>keytool -list -keystore jetty.jks
  </code></pre>
  
  <p>I can see all the certificates showing with their alias</p>
  
  <p>3) I placed the keystore in /etc folder and edited the jetty-ssl.xml</p>
  
  <pre><code>&lt;Set name="KeyStorePath"&gt;&lt;Property name="jetty.base" default="." /&gt;/&lt;Property name="jetty.keystore" default="etc/jetty.jks"/&gt;&lt;/Set&gt;
  &lt;Set name="KeyStorePassword"&gt;&lt;Property name="jetty.keystore.password" default="somepassword"/&gt;&lt;/Set&gt;
  &lt;Set name="KeyManagerPassword"&gt;&lt;Property name="jetty.keymanager.password" default="somepassword"/&gt;&lt;/Set&gt;
  &lt;Set name="TrustStorePath"&gt;&lt;Property name="jetty.base" default="." /&gt;/&lt;Property name="jetty.truststore" default="etc/jetty.jks"/&gt;&lt;/Set&gt;
  &lt;Set name="TrustStorePassword"&gt;&lt;Property name="jetty.truststore.password" default="somepassword"/&gt;&lt;/Set&gt;
  </code></pre>
  
  <p>on startup I can see both the http and https connectors 'up'</p>
  
  <pre><code>10927 [main] INFO  org.eclipse.jetty.server.ServerConnector  - Started ServerConnector@231e04a9{HTTP/1.1}{0.0.0.0:8090}
  11285 [main] INFO  org.eclipse.jetty.server.ServerConnector  - Started ServerConnector@4a1f826d{SSL-http/1.1}{0.0.0.0:8443}
  11285 [main] INFO  org.eclipse.jetty.server.Server  - Started @12632ms
  </code></pre>
  
  <p>but the https does not respond, indeed I see from netstat that nothing is listening on port 8443 (while showing a healthy one for port 8090)</p>
  
  <p>I tried using the 'sample' keystore shipped with jetty and got it working, which makes me think of some issue with my keystore ... but, I see no errors on the console nor in any logs (even when started with -DDEBUG=true) and I can see the keystore's certificates.</p>
  
  <p>I tried also to 'force' which alias to pick with  -Djetty.https-cert-alias=capi but no luck.</p>
  
  <p>Any ideas on how to debug this?</p>
  
  <p>Thanks!</p>