In did, all failed when it load jetty-https.xml but I just added my password in it.
###################################
############# Run Error ##############
###################################
org.sonatype.nexus.bootstrap.jetty.JettyServer - Applying configuration: file:/C:/Nexus3/nexus-3.28.0-01/etc/jetty/jetty-https.xml
Blockquote2020-12-04 10:30:50,687+0100 WARN [FelixStartLevel] *SYSTEM org.eclipse.jetty.xml.XmlConfiguration - Config error at
2020-12-04 10:30:50,687+0100 WARN [FelixStartLevel] *SYSTEM org.eclipse.jetty.xml.XmlConfiguration - Config error at https
2020-12-04 10:30:50,702+0100 ERROR [FelixStartLevel] *SYSTEM org.sonatype.nexus.bootstrap.jetty.JettyServer - Start failed
###################################
############# JettyConf ##############
###################################
C:\Nexus3\nexus-3.28.0-01\etc\jetty\jetty-https.xml
<?xml version="1.0"?>
<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty /configure_9_0.dtd">
<Configure id="Server" class="org.eclipse.jetty.server.Server">
<!--
==== HTTPS ====
Set the following inside nexus.properties:
application-port-ssl: the port to listen for https connections
-->
<Ref refid="httpConfig">
<Set name="secureScheme">https</Set>
<Set name="securePort"><Property name="application-port-ssl" /></Set>
</Ref>
<New id="httpsConfig" class="org.eclipse.jetty.server.HttpConfiguration">
<Arg><Ref refid="httpConfig"/></Arg>
<Call name="addCustomizer">
<Arg>
<New id="secureRequestCustomizer" class="org.eclipse.jetty.server.SecureRequestCustomizer">
<!-- 7776000 seconds = 90 days -->
<Set name="stsMaxAge"><Property name="jetty.https.stsMaxAge" default="7776000"/> </Set>
<Set name="stsIncludeSubDomains"><Property name="jetty.https.stsIncludeSubDomains" default="false"/></Set>
<Set name="sniHostCheck"><Property name="jetty.https.sniHostCheck" default="false"/> </Set>
</New>
</Arg>
</Call>
</New>
<New id="sslContextFactory" class="org.eclipse.jetty.util.ssl.SslContextFactory$Server">
<Set name="certAlias">jetty</Set>
<Set name="KeyStorePath"><Property name="ssl.etc"/>/keystore.jks</Set>
<Set name="KeyStorePassword">MyP@ss</Set>
<Set name="KeyManagerPassword">MyP@ss</Set>
<Set name="TrustStorePath"><Property name="ssl.etc"/>/keystore.jks</Set>
<Set name="TrustStorePassword">MyP@ss</Set>
<Set name="EndpointIdentificationAlgorithm"></Set>
<Set name="NeedClientAuth"><Property name="jetty.ssl.needClientAuth" default="false"</Set>
<Set name="WantClientAuth"><Property name="jetty.ssl.wantClientAuth" default="false"/></Set>
<Set name="ExcludeCipherSuites">