[java-idp-jetty-base] branch 9.4 updated: IDP-1110 - Use Jetty's default TLS protocols and cipher suites

[Tom Zeller]

This is an automated email from the git hooks/post-receive script.

tzeller pushed a commit to branch 9.4
in repository java-idp-jetty-base.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-jetty-base.git;a=commit;h=e602cbeb7273a9c7aa50abcfebc4f22f2fe78680

The following commit(s) were added to refs/heads/9.4 by this push:
       new  e602cbe   IDP-1110 - Use Jetty's default TLS protocols and cipher suites
e602cbe is described below

commit e602cbeb7273a9c7aa50abcfebc4f22f2fe78680
Author: Tom Zeller <tzeller at dragonacea.biz>
AuthorDate: Fri Aug 17 11:56:10 2018 -0500

    IDP-1110 - Use Jetty's default TLS protocols and cipher suites
    
    https://issues.shibboleth.net/jira/browse/IDP-1110
---
 .../resources/jetty-base/etc/idp-backchannel.xml   | 22 ------------------
 .../resources/jetty-base/etc/idp-ssl-context.xml   | 26 ----------------------
 src/main/resources/jetty-base/modules/idp.mod      |  3 ---
 3 files changed, 51 deletions(-)

diff --git a/src/main/resources/jetty-base/etc/idp-backchannel.xml b/src/main/resources/jetty-base/etc/idp-backchannel.xml
index 591b01d..4c0353d 100644
--- a/src/main/resources/jetty-base/etc/idp-backchannel.xml
+++ b/src/main/resources/jetty-base/etc/idp-backchannel.xml
@@ -13,28 +13,6 @@
     <Set name="EndpointIdentificationAlgorithm"></Set>
     <Set name="renegotiationAllowed">false</Set>
     <Set name="useCipherSuitesOrder">true</Set>
-    <Set name="excludeProtocols">
-      <Array type="String">
-        <Item>SSL</Item>
-        <Item>SSLv2</Item>
-        <Item>SSLv3</Item>
-      </Array>
-    </Set>
-    <Set name="IncludeCipherSuites">
-      <Array type="String">
-        <Item>TLS_ECDHE.*</Item>
-        <Item>TLS_RSA.*</Item>
-      </Array>
-    </Set>
-    <Set name="ExcludeCipherSuites">
-      <Array type="String">
-        <Item>.*NULL.*</Item>
-        <Item>.*RC4.*</Item>
-        <Item>.*MD5.*</Item>
-        <Item>.*DES.*</Item>
-        <Item>.*DSS.*</Item>
-      </Array>
-    </Set>
   </New>
 
   <New id="shibHttpConfig" class="org.eclipse.jetty.server.HttpConfiguration">
diff --git a/src/main/resources/jetty-base/etc/idp-ssl-context.xml b/src/main/resources/jetty-base/etc/idp-ssl-context.xml
deleted file mode 100644
index 4c729d3..0000000
--- a/src/main/resources/jetty-base/etc/idp-ssl-context.xml
+++ /dev/null
@@ -1,26 +0,0 @@
-<?xml version="1.0"?>
-<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure_9_3.dtd">
-<Configure id="sslContextFactory" class="org.eclipse.jetty.util.ssl.SslContextFactory">
-    <Set name="excludeProtocols">
-      <Array type="String">
-        <Item>SSL</Item>
-        <Item>SSLv2</Item>
-        <Item>SSLv3</Item>
-      </Array>
-    </Set>
-    <Set name="IncludeCipherSuites">
-      <Array type="String">
-        <Item>TLS_ECDHE.*</Item>
-        <Item>TLS_RSA.*</Item>
-      </Array>
-    </Set>
-    <Set name="ExcludeCipherSuites">
-      <Array type="String">
-        <Item>.*NULL.*</Item>
-        <Item>.*RC4.*</Item>
-        <Item>.*MD5.*</Item>
-        <Item>.*DES.*</Item>
-        <Item>.*DSS.*</Item>
-      </Array>
-    </Set>
-</Configure>
\ No newline at end of file
diff --git a/src/main/resources/jetty-base/modules/idp.mod b/src/main/resources/jetty-base/modules/idp.mod
index b7f57c0..601dd45 100644
--- a/src/main/resources/jetty-base/modules/idp.mod
+++ b/src/main/resources/jetty-base/modules/idp.mod
@@ -16,6 +16,3 @@ ssl
 
 [files]
 tmp/
-
-[xml]
-etc/idp-ssl-context.xml

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.