[java-idp-tomcat-base] 01/04: More TLS configuration

[Tom Zeller]

This is an automated email from the git hooks/post-receive script.

tzeller pushed a commit to branch 8.5
in repository java-idp-tomcat-base.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-tomcat-base.git;a=commit;h=cec2707da6e2dd1027c92882b98462d4e48f57f3

commit cec2707da6e2dd1027c92882b98462d4e48f57f3
Author: Tom Zeller <tzeller at dragonacea.biz>
AuthorDate: Thu Mar 29 18:18:46 2018 -0500

    More TLS configuration
---
 src/main/resources/tomcat-base/conf/catalina.properties | 1 +
 src/main/resources/tomcat-base/conf/server.xml          | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/main/resources/tomcat-base/conf/catalina.properties b/src/main/resources/tomcat-base/conf/catalina.properties
index 005aedc..484c695 100644
--- a/src/main/resources/tomcat-base/conf/catalina.properties
+++ b/src/main/resources/tomcat-base/conf/catalina.properties
@@ -261,6 +261,7 @@ tomcat.host=localhost
 # The HTTPS port
 tomcat.https.port=8443
 tomcat.https.certificateKeystoreFile=../credentials/idp-userfacing.p12
+tomcat.https.certificateKeystorePassword=changeit
 
 # The SOAP endpoint port
 tomcat.backchannel.port=9443
diff --git a/src/main/resources/tomcat-base/conf/server.xml b/src/main/resources/tomcat-base/conf/server.xml
index b08afea..000c7ff 100644
--- a/src/main/resources/tomcat-base/conf/server.xml
+++ b/src/main/resources/tomcat-base/conf/server.xml
@@ -69,9 +69,10 @@
     -->
 
     <Connector port="${tomcat.https.port}" protocol="org.apache.coyote.http11.Http11NioProtocol"
-               maxThreads="150" SSLEnabled="true">
+               maxThreads="150" SSLEnabled="true" scheme="https" secure="true">
         <SSLHostConfig>
             <Certificate certificateKeystoreFile="${tomcat.https.certificateKeystoreFile}"
+                         certificateKeystorePassword="${tomcat.https.certificateKeystorePassword}"
                          type="RSA" />
         </SSLHostConfig>
     </Connector>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.