[java-idp-example-jetty-base] 02/04: Add jetty-base copied from idp-distribution jetty-base-9.3.

Tom Zeller tzeller at dragonacea.biz
Mon May 23 16:13:52 EDT 2016


This is an automated email from the git hooks/post-receive script.

tzeller pushed a commit to branch 9.3
in repository java-idp-example-jetty-base.

commit 41fb64da3be9dc55ea4006f16b615da0d6767268
Author: Tom Zeller <tzeller at dragonacea.biz>
AuthorDate: Mon May 23 13:03:25 2016 -0500

    Add jetty-base copied from idp-distribution jetty-base-9.3.
---
 .../resources/jetty-base/etc/jetty-backchannel.xml | 88 ++++++++++++++++++++++
 src/main/resources/jetty-base/etc/jetty-deploy.xml | 61 +++++++++++++++
 src/main/resources/jetty-base/etc/jetty-http.xml   | 47 ++++++++++++
 .../resources/jetty-base/etc/jetty-requestlog.xml  | 15 ++++
 .../resources/jetty-base/etc/jetty-ssl-context.xml | 41 ++++++++++
 src/main/resources/jetty-base/etc/jetty-ssl.xml    | 58 ++++++++++++++
 .../resources/jetty-base/modules/backchannel.mod   |  8 ++
 .../jetty-base/resources/logback-access.xml        | 14 ++++
 .../resources/jetty-base/resources/logback.xml     | 21 ++++++
 src/main/resources/jetty-base/start.d/idp.ini      | 59 +++++++++++++++
 src/main/resources/jetty-base/start.ini            | 23 ++++++
 src/main/resources/jetty-base/webapps/idp.xml      | 14 ++++
 src/main/resources/jetty-base/webapps/static.xml   | 17 +++++
 13 files changed, 466 insertions(+)

diff --git a/src/main/resources/jetty-base/etc/jetty-backchannel.xml b/src/main/resources/jetty-base/etc/jetty-backchannel.xml
new file mode 100644
index 0000000..30fdfc7
--- /dev/null
+++ b/src/main/resources/jetty-base/etc/jetty-backchannel.xml
@@ -0,0 +1,88 @@
+<?xml version="1.0"?>
+<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure_9_0.dtd">
+ 
+<Configure id="Server" class="org.eclipse.jetty.server.Server">
+  
+ <!-- ============================================================= -->
+  <!-- TLS context factory with optional client auth                 -->
+  <!-- and no container trust (delegate to application)              -->
+  <!-- for backchannel (SOAP) communication to IdP                   -->
+  <!-- ============================================================= -->
+  <New id="shibContextFactory" class="net.shibboleth.utilities.jetty9.DelegateToApplicationSslContextFactory">
+    <Set name="KeyStorePath"><Property name="jetty.backchannel.keystore.path" /></Set>
+    <Set name="KeyStoreType"><Property name="jetty.backchannel.keystore.type" /></Set>
+    <Set name="KeyStorePassword"><Property name="jetty.backchannel.keystore.password" /></Set>
+    <!-- This is a tweak to work around a bug in Jetty when using the PKCS12 keystore type. -->
+    <Set name="TrustStoreType"><Property name="jetty.backchannel.keystore.type" /></Set>
+    <Set name="EndpointIdentificationAlgorithm"></Set>
+    <Set name="renegotiationAllowed">false</Set>
+    <Set name="useCipherSuitesOrder">true</Set>
+    <Set name="excludeProtocols">
+      <Array type="String">
+        <Item>SSL SSLv2 SSLv3</Item>
+      </Array>
+    </Set>
+    <Set name="IncludeCipherSuites">
+      <Array type="String">
+          <Item>TLS_ECDHE.*</Item>
+          <Item>TLS_RSA.*</Item>
+      </Array>
+    </Set>
+    <Set name="ExcludeCipherSuites">
+      <Array type="String">
+        <Item>.*NULL.*</Item>
+        <Item>.*RC4.*</Item>
+        <Item>.*MD5.*</Item>
+        <Item>.*DES.*</Item>
+        <Item>.*DSS.*</Item>
+      </Array>
+    </Set>
+  </New>
+ 
+  <New id="shibHttpConfig" class="org.eclipse.jetty.server.HttpConfiguration">
+    <Arg><Ref refid="httpConfig"/></Arg>
+    <Call name="addCustomizer">
+      <Arg>
+        <New class="org.eclipse.jetty.server.SecureRequestCustomizer">
+          <Arg type="boolean"><Property name="jetty.ssl.sniHostCheck" default="true"/></Arg>
+        </New>
+      </Arg>
+    </Call>
+  </New>
+ 
+  <!-- ============================================================= -->
+  <!-- IdP SOAP protocol connector                                   -->
+  <!-- ============================================================= -->
+  <Call id="shibConnector" name="addConnector">
+    <Arg>
+      <New class="org.eclipse.jetty.server.ServerConnector">
+        <Arg name="server"><Ref refid="Server" /></Arg>
+        <Arg name="acceptors" type="int"><Property name="jetty.ssl.acceptors" default="-1"/></Arg>
+        <Arg name="selectors" type="int"><Property name="jetty.ssl.selectors" default="-1"/></Arg>
+        <Arg name="factories">
+          <Array type="org.eclipse.jetty.server.ConnectionFactory">
+            <Item>
+              <New class="org.eclipse.jetty.server.SslConnectionFactory">
+                <Arg name="next">http/1.1</Arg>
+                <Arg name="sslContextFactory"><Ref refid="shibContextFactory"/></Arg>
+              </New>
+            </Item>
+            <Item>
+              <New class="org.eclipse.jetty.server.HttpConnectionFactory">
+                <Arg name="config"><Ref refid="shibHttpConfig"/></Arg>
+              </New>
+            </Item>
+          </Array>
+        </Arg>
+        <Set name="host"><Property name="jetty.backchannel.host" default="0.0.0.0" /></Set>
+        <Set name="port"><Property name="jetty.backchannel.port" default="8443"/></Set>
+        <Set name="idleTimeout"><Property name="jetty.ssl.timeout" default="30000"/></Set>
+        <Set name="soLingerTime"><Property name="jetty.ssl.soLingerTime" default="-1"/></Set>
+        <Set name="acceptorPriorityDelta"><Property name="jetty.ssl.acceptorPriorityDelta" default="0"/></Set>
+        <Set name="selectorPriorityDelta"><Property name="jetty.ssl.selectorPriorityDelta" default="0"/></Set>
+        <Set name="acceptQueueSize"><Property name="jetty.ssl.acceptQueueSize" default="0"/></Set>
+      </New>
+    </Arg>
+  </Call>
+ 
+</Configure>
diff --git a/src/main/resources/jetty-base/etc/jetty-deploy.xml b/src/main/resources/jetty-base/etc/jetty-deploy.xml
new file mode 100644
index 0000000..74901d5
--- /dev/null
+++ b/src/main/resources/jetty-base/etc/jetty-deploy.xml
@@ -0,0 +1,61 @@
+<?xml version="1.0"?>
+<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure_9_3.dtd">
+
+<!-- =============================================================== -->
+<!-- Create the deployment manager                                   -->
+<!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
+<!-- The deplyment manager handles the lifecycle of deploying web    -->
+<!-- applications. Apps are provided by instances of the             -->
+<!-- AppProvider interface.                                          -->
+<!-- =============================================================== -->
+<Configure id="Server" class="org.eclipse.jetty.server.Server">
+
+  <Call name="addBean">
+    <Arg>
+      <New id="DeploymentManager" class="org.eclipse.jetty.deploy.DeploymentManager">
+        <Set name="contexts">
+          <Ref refid="Contexts" />
+        </Set>
+        <Call name="setContextAttribute">
+          <Arg>org.eclipse.jetty.server.webapp.ContainerIncludeJarPattern</Arg>
+          <Arg>.*/[^/]*servlet-api-[^/]*\.jar$|.*/javax.servlet.jsp.jstl-.*\.jar$|.*/org.apache.taglibs.taglibs-standard-impl-.*\.jar$</Arg>
+        </Call>
+
+        <!-- Add a customize step to the deployment lifecycle -->
+        <!-- uncomment and replace DebugBinding with your extended AppLifeCycle.Binding class
+        <Call name="insertLifeCycleNode">
+          <Arg>deployed</Arg>
+          <Arg>starting</Arg>
+          <Arg>customise</Arg>
+        </Call>
+        <Call name="addLifeCycleBinding">
+          <Arg>
+            <New class="org.eclipse.jetty.deploy.bindings.DebugBinding">
+              <Arg>customise</Arg>
+            </New>
+          </Arg>
+        </Call> -->
+
+        <Call id="webappprovider" name="addAppProvider">
+          <Arg>
+            <New class="org.eclipse.jetty.deploy.providers.WebAppProvider">
+              <Set name="monitoredDirName"><Property name="jetty.base" default="." />/<Property name="jetty.deploy.monitoredDir" deprecated="jetty.deploy.monitoredDirName" default="webapps"/></Set>
+              <Set name="defaultsDescriptor"><Property name="jetty.home" default="." />/etc/webdefault.xml</Set>
+              <Set name="scanInterval"><Property name="jetty.deploy.scanInterval" default="1"/></Set>
+              <Set name="extractWars"><Property name="jetty.deploy.extractWars" default="true"/></Set>
+              <Set name="configurationManager">
+                <New class="org.eclipse.jetty.deploy.PropertiesConfigurationManager">
+                  <!-- file of context configuration properties -->
+                  <Set name="file"><Property name="jetty.base"/>/start.d/idp.ini</Set>
+                  <!-- set a context configuration property
+                  <Call name="put"><Arg>name</Arg><Arg>value</Arg></Call>
+                  -->
+                </New>
+              </Set>
+            </New>
+          </Arg>
+        </Call>
+      </New>
+    </Arg>
+  </Call>
+</Configure>
diff --git a/src/main/resources/jetty-base/etc/jetty-http.xml b/src/main/resources/jetty-base/etc/jetty-http.xml
new file mode 100644
index 0000000..dc3303b
--- /dev/null
+++ b/src/main/resources/jetty-base/etc/jetty-http.xml
@@ -0,0 +1,47 @@
+<?xml version="1.0"?>
+<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure_9_3.dtd">
+
+<!-- ============================================================= -->
+<!-- Configure the Jetty Server instance with an ID "Server"       -->
+<!-- by adding a HTTP connector.                                   -->
+<!-- This configuration must be used in conjunction with jetty.xml -->
+<!-- ============================================================= -->
+<Configure id="Server" class="org.eclipse.jetty.server.Server">
+
+  <!-- =========================================================== -->
+  <!-- Add a HTTP Connector.                                       -->
+  <!-- Configure an o.e.j.server.ServerConnector with a single     -->
+  <!-- HttpConnectionFactory instance using the common httpConfig  -->
+  <!-- instance defined in jetty.xml                               -->
+  <!--                                                             -->
+  <!-- Consult the javadoc of o.e.j.server.ServerConnector and     -->
+  <!-- o.e.j.server.HttpConnectionFactory for all configuration    -->
+  <!-- that may be set here.                                       -->
+  <!-- =========================================================== -->
+  <Call name="addConnector">
+    <Arg>
+      <New id="httpConnector" class="org.eclipse.jetty.server.ServerConnector">
+        <Arg name="server"><Ref refid="Server" /></Arg>
+        <Arg name="acceptors" type="int"><Property name="jetty.http.acceptors" deprecated="http.acceptors" default="-1"/></Arg>
+        <Arg name="selectors" type="int"><Property name="jetty.http.selectors" deprecated="http.selectors" default="-1"/></Arg>
+        <Arg name="factories">
+          <Array type="org.eclipse.jetty.server.ConnectionFactory">
+            <Item>
+              <New class="org.eclipse.jetty.server.HttpConnectionFactory">
+                <Arg name="config"><Ref refid="httpConfig" /></Arg>
+                <Arg name="compliance"><Call class="org.eclipse.jetty.http.HttpCompliance" name="valueOf"><Arg><Property name="jetty.http.compliance" default="RFC7230"/></Arg></Call></Arg>
+              </New>
+            </Item>
+          </Array>
+        </Arg>
+        <Set name="host"><Property name="jetty.nonhttps.host" deprecated="jetty.host" /></Set>
+        <Set name="port"><Property name="jetty.nonhttps.port" deprecated="jetty.port" default="8080" /></Set>
+        <Set name="idleTimeout"><Property name="jetty.http.idleTimeout" deprecated="http.timeout" default="30000"/></Set>
+        <Set name="soLingerTime"><Property name="jetty.http.soLingerTime" deprecated="http.soLingerTime" default="-1"/></Set>
+        <Set name="acceptorPriorityDelta"><Property name="jetty.http.acceptorPriorityDelta" deprecated="http.acceptorPriorityDelta" default="0"/></Set>
+        <Set name="acceptQueueSize"><Property name="jetty.http.acceptQueueSize" deprecated="http.acceptQueueSize" default="0"/></Set>
+      </New>
+    </Arg>
+  </Call>
+
+</Configure>
diff --git a/src/main/resources/jetty-base/etc/jetty-requestlog.xml b/src/main/resources/jetty-base/etc/jetty-requestlog.xml
new file mode 100644
index 0000000..95f0154
--- /dev/null
+++ b/src/main/resources/jetty-base/etc/jetty-requestlog.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0"?>
+<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure_9_0.dtd">
+<!-- =============================================================== -->
+<!-- Configure the Jetty Request Log                                 -->
+<!-- =============================================================== -->
+<Configure id="Server" class="org.eclipse.jetty.server.Server">
+  <Set name="RequestLog">
+    <New id="RequestLog" class="ch.qos.logback.access.jetty.RequestLogImpl">
+      <Set name="fileName"><Property name="jetty.base" default="." />/resources/logback-access.xml</Set>
+    </New>
+  </Set>
+  <Ref refid="RequestLog">
+    <Call name="start" />
+  </Ref>
+</Configure>
diff --git a/src/main/resources/jetty-base/etc/jetty-ssl-context.xml b/src/main/resources/jetty-base/etc/jetty-ssl-context.xml
new file mode 100644
index 0000000..8ec9a03
--- /dev/null
+++ b/src/main/resources/jetty-base/etc/jetty-ssl-context.xml
@@ -0,0 +1,41 @@
+<?xml version="1.0"?>
+<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure_9_0.dtd">
+<Configure id="Server" class="org.eclipse.jetty.server.Server">
+  <!-- ============================================================= -->
+  <!-- TLS context factory without client auth                       -->
+  <!-- ============================================================= -->
+  <New id="sslContextFactory" class="org.eclipse.jetty.util.ssl.SslContextFactory">
+    <Set name="KeyStorePath"><Property name="jetty.browser.keystore.path" /></Set>
+    <Set name="KeyStoreType"><Property name="jetty.browser.keystore.type" /></Set>
+    <Set name="KeyStorePassword"><Property name="jetty.browser.keystore.password" /></Set>
+    <!-- This is a tweak to work around a bug in Jetty when using the PKCS12 keystore type. -->
+    <Set name="TrustStoreType"><Property name="jetty.browser.keystore.type" /></Set>
+    <Set name="EndpointIdentificationAlgorithm"></Set>
+    <Set name="NeedClientAuth"><Property name="jetty.sslContext.needClientAuth" default="false"/></Set>
+    <Set name="WantClientAuth"><Property name="jetty.sslContext.wantClientAuth" default="false"/></Set>
+    <Set name="useCipherSuitesOrder"><Property name="jetty.sslContext.useCipherSuitesOrder" default="true"/></Set>
+    <Set name="renegotiationAllowed">false</Set>
+    <Set name="excludeProtocols">
+      <Array type="String">
+        <Item>SSL SSLv2 SSLv3</Item>
+      </Array>
+    </Set>
+    <Set name="IncludeCipherSuites">
+      <Array type="String">
+          <Item>TLS_ECDHE.*</Item>
+          <Item>TLS_RSA.*</Item>
+      </Array>
+    </Set>
+    <Set name="ExcludeCipherSuites">
+      <Array type="String">
+        <Item>.*NULL.*</Item>
+        <Item>.*RC4.*</Item>
+        <Item>.*MD5.*</Item>
+        <Item>.*DES.*</Item>
+        <Item>.*DSS.*</Item>
+      </Array>
+    </Set>
+ </New>
+
+
+</Configure>
diff --git a/src/main/resources/jetty-base/etc/jetty-ssl.xml b/src/main/resources/jetty-base/etc/jetty-ssl.xml
new file mode 100644
index 0000000..56c4c2f
--- /dev/null
+++ b/src/main/resources/jetty-base/etc/jetty-ssl.xml
@@ -0,0 +1,58 @@
+<?xml version="1.0"?>
+<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure_9_3.dtd">
+
+<!-- ============================================================= -->
+<!-- Base SSL configuration                                        -->
+<!-- This configuration needs to be used together with 1 or more   -->
+<!-- of jetty-https.xml or jetty-http2.xml                         -->
+<!-- ============================================================= -->
+<Configure id="Server" class="org.eclipse.jetty.server.Server">
+
+  <!-- =========================================================== -->
+  <!-- Add a SSL Connector with no protocol factories              -->
+  <!-- =========================================================== -->
+  <Call  name="addConnector">
+    <Arg>
+      <New id="sslConnector" class="org.eclipse.jetty.server.ServerConnector">
+        <Arg name="server"><Ref refid="Server" /></Arg>
+        <Arg name="acceptors" type="int"><Property name="jetty.ssl.acceptors" deprecated="ssl.acceptors" default="-1"/></Arg>
+        <Arg name="selectors" type="int"><Property name="jetty.ssl.selectors" deprecated="ssl.selectors" default="-1"/></Arg>
+        <Arg name="factories">
+          <Array type="org.eclipse.jetty.server.ConnectionFactory">
+            <!-- uncomment to support proxy protocol
+            <Item>
+              <New class="org.eclipse.jetty.server.ProxyConnectionFactory"/>
+            </Item>-->
+          </Array>
+        </Arg>
+
+        <Set name="host"><Property name="jetty.host" /></Set>
+        <Set name="port"><Property name="jetty.https.port" deprecated="ssl.port" default="8443" /></Set>
+        <Set name="idleTimeout"><Property name="jetty.ssl.idleTimeout" deprecated="ssl.timeout" default="30000"/></Set>
+        <Set name="soLingerTime"><Property name="jetty.ssl.soLingerTime" deprecated="ssl.soLingerTime" default="-1"/></Set>
+        <Set name="acceptorPriorityDelta"><Property name="jetty.ssl.acceptorPriorityDelta" deprecated="ssl.acceptorPriorityDelta" default="0"/></Set>
+        <Set name="acceptQueueSize"><Property name="jetty.ssl.acceptQueueSize" deprecated="ssl.acceptQueueSize" default="0"/></Set>
+      </New>
+    </Arg>
+  </Call>
+
+  <!-- =========================================================== -->
+  <!-- Create a TLS specific HttpConfiguration based on the        -->
+  <!-- common HttpConfiguration defined in jetty.xml               -->
+  <!-- Add a SecureRequestCustomizer to extract certificate and    -->
+  <!-- session information                                         -->
+  <!-- =========================================================== -->
+  <New id="sslHttpConfig" class="org.eclipse.jetty.server.HttpConfiguration">
+    <Arg><Ref refid="httpConfig"/></Arg>
+    <Call name="addCustomizer">
+      <Arg>
+        <New class="org.eclipse.jetty.server.SecureRequestCustomizer">
+          <Arg name="sniHostCheck" type="boolean"><Property name="jetty.ssl.sniHostCheck" default="true"/></Arg>
+          <Arg name="stsMaxAgeSeconds" type="int"><Property name="jetty.ssl.stsMaxAgeSeconds" default="-1"/></Arg>
+          <Arg name="stsIncludeSubdomains" type="boolean"><Property name="jetty.ssl.stsIncludeSubdomains" default="false"/></Arg>
+        </New>
+      </Arg>
+    </Call>
+  </New>
+
+</Configure>
diff --git a/src/main/resources/jetty-base/modules/backchannel.mod b/src/main/resources/jetty-base/modules/backchannel.mod
new file mode 100644
index 0000000..c7b6581
--- /dev/null
+++ b/src/main/resources/jetty-base/modules/backchannel.mod
@@ -0,0 +1,8 @@
+[name]
+backchannel
+ 
+[depend]
+server
+ 
+[xml]
+etc/jetty-backchannel.xml
diff --git a/src/main/resources/jetty-base/resources/logback-access.xml b/src/main/resources/jetty-base/resources/logback-access.xml
new file mode 100644
index 0000000..aed30ce
--- /dev/null
+++ b/src/main/resources/jetty-base/resources/logback-access.xml
@@ -0,0 +1,14 @@
+<configuration>
+  <statusListener class="ch.qos.logback.core.status.OnConsoleStatusListener" /> 
+  <appender name="FILE" class="ch.qos.logback.core.rolling.RollingFileAppender">
+    <file>${jetty.base}/logs/access.log</file>
+    <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
+      <fileNamePattern>${jetty.base}/logs/access-%d{yyyy-MM-dd}.log.gz</fileNamePattern>
+    </rollingPolicy>
+    <encoder>
+      <pattern>combined</pattern>
+    </encoder>
+  </appender>
+  
+  <appender-ref ref="FILE" />
+</configuration>
diff --git a/src/main/resources/jetty-base/resources/logback.xml b/src/main/resources/jetty-base/resources/logback.xml
new file mode 100644
index 0000000..40c8e6e
--- /dev/null
+++ b/src/main/resources/jetty-base/resources/logback.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<configuration scan="true">
+    <appender name="jetty" class="ch.qos.logback.core.rolling.RollingFileAppender">
+        <File>${jetty.base}/logs/jetty.log</File>
+         
+        <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
+            <FileNamePattern>${jetty.base}/logs/jetty-%d{yyyy-MM-dd}.log.gz</FileNamePattern>
+        </rollingPolicy>
+ 
+        <encoder class="ch.qos.logback.classic.encoder.PatternLayoutEncoder">
+            <charset>UTF-8</charset>
+            <Pattern>%date{HH:mm:ss.SSS} - %level [%logger:%line] - %msg%n</Pattern>
+        </encoder>
+    </appender>
+   
+    <root level="DEBUG">
+        <appender-ref ref="jetty" />
+    </root>
+    <logger name="org.springframework" level="OFF" />
+    <logger name="ch.qos.logback" level="WARN" />
+</configuration>
diff --git a/src/main/resources/jetty-base/start.d/idp.ini b/src/main/resources/jetty-base/start.d/idp.ini
new file mode 100644
index 0000000..ac33c54
--- /dev/null
+++ b/src/main/resources/jetty-base/start.d/idp.ini
@@ -0,0 +1,59 @@
+#
+# Note for Windows users:
+#
+# These are the only properties which are guaranteed to work between upgrades.  You may find 
+# more in jetty.xml and add them here and they may work. 
+# 
+# To repeat, only properties listed below are guarantee to work between upgrades.
+#
+
+# The interface to listen on. To listen on all interfaces, set jetty.host = 0.0.0.0
+## jetty-ssl.xml
+jetty.host=localhost
+
+# The HTTPS port
+## jetty-ssl.xml
+jetty.https.port=8443
+
+# The SOAP endpoint port
+## jetty-backchannel.xml
+jetty.backchannel.port=9443
+
+# Absolute path to keystores
+## jetty-backchannel.xml
+jetty.backchannel.keystore.path=../credentials/idp-backchannel.p12
+## jetty-ssl-context.xml
+jetty.browser.keystore.path=../credentials/idp-userfacing.p12
+
+# Keystore passwords
+## jetty-backchannel.xml
+jetty.backchannel.keystore.password=changeit
+## jetty-ssl-context.xml
+jetty.browser.keystore.password=changeit
+
+# Keystore types
+## jetty-backchannel.xml
+jetty.backchannel.keystore.type=PKCS12
+## jetty-ssl-context.xml
+jetty.browser.keystore.type=PKCS12
+
+# The IdP webapp context path
+## idp.xml
+jetty.context.path=/idp
+
+# Path to IdP WAR (dir or file), relative to ${jetty.base} directory
+## idp.xml
+jetty.war.path=../webapp
+
+#Path to statically served.  This is relative to ${jetty.base} directory
+## static.xml
+#jetty.static.data.path=../static
+
+#
+# Configuration for the non https connection.
+# 
+# In general, do not modify these values
+## jetty-http.xml
+jetty.nonhttps.host=localhost
+## jetty-http.xml
+jetty.nonhttps.port=8080
diff --git a/src/main/resources/jetty-base/start.ini b/src/main/resources/jetty-base/start.ini
new file mode 100644
index 0000000..c832db1
--- /dev/null
+++ b/src/main/resources/jetty-base/start.ini
@@ -0,0 +1,23 @@
+# See https://wiki.shibboleth.net/confluence/display/IDP30/Jetty93
+# But note that we run in process.
+ 
+# Required Jetty modules
+--module=server
+--module=deploy
+--module=annotations
+--module=resources
+--module=logging
+--module=requestlog
+--module=servlets
+--module=jsp
+--module=jstl
+--module=ext
+--module=plus
+--module=ssl
+--module=http
+--module=https
+  
+--module=backchannel 
+# Bypass file validation for the SSL module, to work around a bug in Jetty 9.3.X
+--skip-file-validation=ssl
+ 
diff --git a/src/main/resources/jetty-base/webapps/idp.xml b/src/main/resources/jetty-base/webapps/idp.xml
new file mode 100644
index 0000000..f51abc1
--- /dev/null
+++ b/src/main/resources/jetty-base/webapps/idp.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0"?>
+<!DOCTYPE Configure PUBLIC "-//Mort Bay Consulting//DTD Configure//EN" "http://www.eclipse.org/jetty/configure_9_0.dtd">
+
+<!-- =============================================================== -->
+<!-- Configure the Shibboleth IdP webapp                             -->
+<!-- =============================================================== -->
+<Configure class="org.eclipse.jetty.webapp.WebAppContext">
+  <Set name="war"><Property name="jetty.war.path" /></Set>
+  <Set name="contextPath"><Property name="jetty.context.path" /></Set>
+  <Set name="extractWAR">false</Set>
+  <Set name="copyWebDir">false</Set>
+  <!-- https://bugs.eclipse.org/bugs/show_bug.cgi?id=375504 -->
+  <Set name="copyWebInf">true</Set>
+</Configure>
diff --git a/src/main/resources/jetty-base/webapps/static.xml b/src/main/resources/jetty-base/webapps/static.xml
new file mode 100644
index 0000000..7497b9e
--- /dev/null
+++ b/src/main/resources/jetty-base/webapps/static.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0"?>
+<!DOCTYPE Configure PUBLIC "-//Mort Bay Consulting//DTD Configure//EN" "http://www.eclipse.org/jetty/configure_9_0.dtd">
+
+<!-- =============================================================== -->
+<!-- Configure static content delivery                               -->
+<!-- =============================================================== -->
+<Configure class="org.eclipse.jetty.server.handler.ContextHandler">
+  <Set name="contextPath">/</Set>
+  <Set name="handler">
+    <New class="org.eclipse.jetty.server.handler.ResourceHandler">
+      <Set name="resourceBase">
+        <Property name="jetty.base"/>/<Property name="jetty.static.data.path" default="../static"/>
+      </Set>
+      <Set name="directoriesListed">false</Set>
+    </New>
+  </Set>
+</Configure>
\ No newline at end of file

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list