[java-idp-jetty-base] 03/07: IDP-1110 - WIP modules
Tom Zeller
tzeller at dragonacea.biz
Thu Mar 2 03:48:53 EST 2017
This is an automated email from the git hooks/post-receive script.
tzeller pushed a commit to branch 9.4
in repository java-idp-jetty-base.
View the commit online:
http://git.shibboleth.net/view/?p=java-idp-jetty-base.git;a=commit;h=98428e59afb4470f71955d7e3c358d46d13b2653
commit 98428e59afb4470f71955d7e3c358d46d13b2653
Author: Tom Zeller <tzeller at dragonacea.biz>
AuthorDate: Thu Mar 2 02:15:22 2017 -0600
IDP-1110 - WIP modules
---
.../resources/jetty-base/etc/jetty-ssl-context.xml | 41 +++++++++++++++++++++
.../jetty-base/etc/shibboleth-idp-testbed.xml | 28 ++++++++++++++
.../jetty-base/modules/shibboleth-idp-logging.mod | 10 +++++
.../jetty-base/modules/shibboleth-idp-testbed.mod | 11 ++++++
.../jetty-base/modules/shibboleth-idp.mod | 43 ++++++++++++++++++++++
.../jetty-base/start.d/shibboleth-idp-logging.ini | 1 +
.../jetty-base/start.d/shibboleth-idp-testbed.ini | 1 +
.../jetty-base/start.d/shibboleth-idp.ini | 11 ++++++
src/main/resources/jetty-base/webapps/idp.xml | 13 +++++++
src/main/resources/jetty-base/webapps/static.xml | 17 +++++++++
10 files changed, 176 insertions(+)
diff --git a/src/main/resources/jetty-base/etc/jetty-ssl-context.xml b/src/main/resources/jetty-base/etc/jetty-ssl-context.xml
new file mode 100644
index 0000000..08a7285
--- /dev/null
+++ b/src/main/resources/jetty-base/etc/jetty-ssl-context.xml
@@ -0,0 +1,41 @@
+<?xml version="1.0"?>
+<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure_9_0.dtd">
+<Configure id="Server" class="org.eclipse.jetty.server.Server">
+ <!-- ============================================================= -->
+ <!-- TLS context factory without client auth -->
+ <!-- ============================================================= -->
+ <New id="sslContextFactory" class="org.eclipse.jetty.util.ssl.SslContextFactory">
+ <Set name="KeyStorePath"><Property name="jetty.sslContext.keyStorePath" /></Set>
+ <Set name="KeyStoreType"><Property name="jetty.sslContext.keyStoreType" /></Set>
+ <Set name="KeyStorePassword"><Property name="jetty.sslContext.keyStorePassword" /></Set>
+ <!-- This is a tweak to work around a bug in Jetty when using the PKCS12 keystore type. -->
+ <Set name="TrustStoreType"><Property name="jetty.sslContext.keyStoreType" /></Set>
+ <Set name="EndpointIdentificationAlgorithm"></Set>
+ <Set name="NeedClientAuth"><Property name="jetty.sslContext.needClientAuth" default="false"/></Set>
+ <Set name="WantClientAuth"><Property name="jetty.sslContext.wantClientAuth" default="false"/></Set>
+ <Set name="useCipherSuitesOrder"><Property name="jetty.sslContext.useCipherSuitesOrder" default="true"/></Set>
+ <Set name="renegotiationAllowed">false</Set>
+ <Set name="excludeProtocols">
+ <Array type="String">
+ <Item>SSL</Item>
+ <Item>SSLv2</Item>
+ <Item>SSLv3</Item>
+ </Array>
+ </Set>
+ <Set name="IncludeCipherSuites">
+ <Array type="String">
+ <Item>TLS_ECDHE.*</Item>
+ <Item>TLS_RSA.*</Item>
+ </Array>
+ </Set>
+ <Set name="ExcludeCipherSuites">
+ <Array type="String">
+ <Item>.*NULL.*</Item>
+ <Item>.*RC4.*</Item>
+ <Item>.*MD5.*</Item>
+ <Item>.*DES.*</Item>
+ <Item>.*DSS.*</Item>
+ </Array>
+ </Set>
+ </New>
+</Configure>
\ No newline at end of file
diff --git a/src/main/resources/jetty-base/etc/shibboleth-idp-testbed.xml b/src/main/resources/jetty-base/etc/shibboleth-idp-testbed.xml
new file mode 100644
index 0000000..076d4cc
--- /dev/null
+++ b/src/main/resources/jetty-base/etc/shibboleth-idp-testbed.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0"?>
+<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure_9_3.dtd">
+
+<!-- =============================================================== -->
+<!-- Configure the Shibboleth Testbed webapp -->
+<!-- =============================================================== -->
+<Configure id="Contexts" class="org.eclipse.jetty.server.handler.ContextHandlerCollection">
+ <Call name="addHandler">
+ <Arg>
+ <New class="org.eclipse.jetty.webapp.WebAppContext">
+ <Set name="war"><Property name="jetty.base" />/testbed-war/idp-testbed.war</Set>
+ <Set name="contextPath">/</Set>
+ <Set name="extractWAR">false</Set>
+ <Set name="copyWebDir">false</Set>
+ <!-- https://bugs.eclipse.org/bugs/show_bug.cgi?id=375504 -->
+ <Set name="copyWebInf">true</Set>
+ <Call name="setAttribute">
+ <Arg>org.eclipse.jetty.server.webapp.WebInfIncludeJarPattern</Arg>
+ <Arg>none</Arg>
+ </Call>
+ <Call name="setAttribute">
+ <Arg>org.eclipse.jetty.webapp.basetempdir</Arg>
+ <Arg><Property name="jetty.base" />/tmp</Arg>
+ </Call>
+ </New>
+ </Arg>
+ </Call>
+</Configure>
\ No newline at end of file
diff --git a/src/main/resources/jetty-base/modules/shibboleth-idp-logging.mod b/src/main/resources/jetty-base/modules/shibboleth-idp-logging.mod
new file mode 100644
index 0000000..ca40cfc
--- /dev/null
+++ b/src/main/resources/jetty-base/modules/shibboleth-idp-logging.mod
@@ -0,0 +1,10 @@
+[description]
+Shibboleth IdP Logging
+
+[depend]
+console-capture
+logging-logback
+logback-access
+
+[files]
+logs/
diff --git a/src/main/resources/jetty-base/modules/shibboleth-idp-testbed.mod b/src/main/resources/jetty-base/modules/shibboleth-idp-testbed.mod
new file mode 100644
index 0000000..43bd9a8
--- /dev/null
+++ b/src/main/resources/jetty-base/modules/shibboleth-idp-testbed.mod
@@ -0,0 +1,11 @@
+[description]
+Shibboleth IdP Testbed
+
+[depend]
+shibboleth-idp
+
+[files]
+testbed-war/idp-testbed.war
+
+[xml]
+etc/shibboleth-idp-testbed.xml
diff --git a/src/main/resources/jetty-base/modules/shibboleth-idp.mod b/src/main/resources/jetty-base/modules/shibboleth-idp.mod
new file mode 100644
index 0000000..366a50c
--- /dev/null
+++ b/src/main/resources/jetty-base/modules/shibboleth-idp.mod
@@ -0,0 +1,43 @@
+[description]
+Shibboleth IdP
+
+[depend]
+annotations
+deploy
+ext
+https
+jsp
+jstl
+plus
+resources
+server
+servlets
+ssl
+
+[files]
+tmp/
+
+[ini]
+
+# Bypass file validation for the SSL module, to work around a bug in Jetty 9.3.X
+# don't create etc/keystore
+--skip-file-validation=ssl
+
+# Allows setting Java system properties (-Dname=value)
+# and JVM flags (-X, -XX) in this file
+# NOTE: spawns child Java process
+# --exec
+
+# Uncomment if IdP is installed somewhere other than /opt/shibboleth-idp
+#-Didp.home=/path/to/shibboleth-idp
+
+# Alternate garbage collector that reduces memory needed for larger metadata files
+# -XX:+UseG1GC
+
+# Maximum amount of memory that Jetty may use, at least 1.5G is recommended
+# for handling larger (> 25M) metadata files but you will need to test on
+# your particular metadata configuration
+# -Xmx1500m
+
+# Maximum amount of memory allowed for the JVM permanent generation (Java 7 only)
+# -XX:MaxPermSize=128m
diff --git a/src/main/resources/jetty-base/start.d/shibboleth-idp-logging.ini b/src/main/resources/jetty-base/start.d/shibboleth-idp-logging.ini
new file mode 100644
index 0000000..83a5425
--- /dev/null
+++ b/src/main/resources/jetty-base/start.d/shibboleth-idp-logging.ini
@@ -0,0 +1 @@
+# --module=shibboleth-idp-logging
diff --git a/src/main/resources/jetty-base/start.d/shibboleth-idp-testbed.ini b/src/main/resources/jetty-base/start.d/shibboleth-idp-testbed.ini
new file mode 100644
index 0000000..68372b9
--- /dev/null
+++ b/src/main/resources/jetty-base/start.d/shibboleth-idp-testbed.ini
@@ -0,0 +1 @@
+# --module=shibboleth-idp-testbed
diff --git a/src/main/resources/jetty-base/start.d/shibboleth-idp.ini b/src/main/resources/jetty-base/start.d/shibboleth-idp.ini
new file mode 100644
index 0000000..7ff6a0d
--- /dev/null
+++ b/src/main/resources/jetty-base/start.d/shibboleth-idp.ini
@@ -0,0 +1,11 @@
+--module=shibboleth-idp
+
+jetty.sslContext.keyStorePath=${idp.home}/credentials/idp-userfacing.p12
+jetty.sslContext.keyStoreType=PKCS12
+jetty.sslContext.keyStorePassword=changeit
+
+## Connector host/address to bind to
+# jetty.ssl.host=0.0.0.0
+
+## Connector port to listen on
+# jetty.ssl.port=8443
diff --git a/src/main/resources/jetty-base/webapps/idp.xml b/src/main/resources/jetty-base/webapps/idp.xml
new file mode 100644
index 0000000..d3a29a0
--- /dev/null
+++ b/src/main/resources/jetty-base/webapps/idp.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0"?>
+<!DOCTYPE Configure PUBLIC "-//Mort Bay Consulting//DTD Configure//EN" "http://www.eclipse.org/jetty/configure_9_0.dtd">
+
+<!-- =============================================================== -->
+<!-- Configure the Shibboleth IdP webapp -->
+<!-- =============================================================== -->
+<Configure class="org.eclipse.jetty.webapp.WebAppContext">
+ <Set name="war"><SystemProperty name="idp.home"/>/war/idp.war</Set>
+ <Set name="contextPath">/idp</Set>
+ <Set name="extractWAR">false</Set>
+ <Set name="copyWebDir">false</Set>
+ <Set name="copyWebInf">true</Set>
+</Configure>
diff --git a/src/main/resources/jetty-base/webapps/static.xml b/src/main/resources/jetty-base/webapps/static.xml
new file mode 100644
index 0000000..7497b9e
--- /dev/null
+++ b/src/main/resources/jetty-base/webapps/static.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0"?>
+<!DOCTYPE Configure PUBLIC "-//Mort Bay Consulting//DTD Configure//EN" "http://www.eclipse.org/jetty/configure_9_0.dtd">
+
+<!-- =============================================================== -->
+<!-- Configure static content delivery -->
+<!-- =============================================================== -->
+<Configure class="org.eclipse.jetty.server.handler.ContextHandler">
+ <Set name="contextPath">/</Set>
+ <Set name="handler">
+ <New class="org.eclipse.jetty.server.handler.ResourceHandler">
+ <Set name="resourceBase">
+ <Property name="jetty.base"/>/<Property name="jetty.static.data.path" default="../static"/>
+ </Set>
+ <Set name="directoriesListed">false</Set>
+ </New>
+ </Set>
+</Configure>
\ No newline at end of file
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list