[java-idp-jetty-base] 02/04: IDP-1914 Work to ship Jetty 10 with the IdP Installer

[Ian Young]

This is an automated email from the git hooks/post-receive script.

iay pushed a commit to branch 10-windows
in repository java-idp-jetty-base.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-jetty-base.git;a=commit;h=ffcc43f2c88f6d0386d2d4dfe83ae58c070bf055

commit ffcc43f2c88f6d0386d2d4dfe83ae58c070bf055
Author: Rod Widdowson <rdw at steadingsoftware.com>
AuthorDate: Fri Mar 4 16:02:36 2022 +0000

    IDP-1914 Work to ship Jetty 10 with the IdP Installer
    
    https://shibboleth.atlassian.net/browse/IDP-1914
    
    Add jetty-ssl-context.xml derived from the shipped version but:
            - No KeyManagerPassword (defaults in the code to KeystorePassword)
            - Absolute KeystorePath
            - No TrustStore anything (Defaults in the code to Keystore)
---
 .../resources/jetty-base/etc/jetty-ssl-context.xml | 45 ++++++++++++++++++++++
 1 file changed, 45 insertions(+)

diff --git a/src/main/resources/jetty-base/etc/jetty-ssl-context.xml b/src/main/resources/jetty-base/etc/jetty-ssl-context.xml
new file mode 100644
index 0000000..a59a645
--- /dev/null
+++ b/src/main/resources/jetty-base/etc/jetty-ssl-context.xml
@@ -0,0 +1,45 @@
+<?xml version="1.0"?><!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "https://www.eclipse.org/jetty/configure_10_0.dtd">
+
+<Configure id="Server" class="org.eclipse.jetty.server.Server">
+  <Call name="addBean">
+    <Arg>
+      <New id="sslContextFactory" class="org.eclipse.jetty.util.ssl.SslContextFactory$Server">
+        <Set name="Provider" property="jetty.sslContext.provider" />
+        <Set name="KeyStorePath"><Property name="jetty.sslContext.keyStorePath" deprecated="jetty.sslContext.keyStoreAbsolutePath,jetty.keystore" default="etc/keystore.p12" /></Set>
+        <Set name="KeyStorePassword"><Property name="jetty.sslContext.keyStorePassword" /></Set>
+        <Set name="KeyStoreType" property="jetty.sslContext.keyStoreType" />
+        <Set name="KeyStoreProvider" property="jetty.sslContext.keyStoreProvider" />
+        <Set name="EndpointIdentificationAlgorithm" property="jetty.sslContext.endpointIdentificationAlgorithm" />
+        <Set name="NeedClientAuth" property="jetty.sslContext.needClientAuth" />
+        <Set name="WantClientAuth" property="jetty.sslContext.wantClientAuth" />
+        <Set name="useCipherSuitesOrder" property="jetty.sslContext.useCipherSuitesOrder" />
+        <Set name="sslSessionCacheSize" property="jetty.sslContext.sslSessionCacheSize" />
+        <Set name="sslSessionTimeout" property="jetty.sslContext.sslSessionTimeout" />
+        <Set name="RenegotiationAllowed" property="jetty.sslContext.renegotiationAllowed" />
+        <Set name="RenegotiationLimit" property="jetty.sslContext.renegotiationLimit" />
+        <Set name="SniRequired" property="jetty.sslContext.sniRequired" />
+
+        <!-- Example of how to configure a PKIX Certificate Path revocation Checker
+        <Call id="pkixPreferCrls" class="java.security.cert.PKIXRevocationChecker$Option" name="valueOf"><Arg>PREFER_CRLS</Arg></Call>
+        <Call id="pkixSoftFail" class="java.security.cert.PKIXRevocationChecker$Option" name="valueOf"><Arg>SOFT_FAIL</Arg></Call>
+        <Call id="pkixNoFallback" class="java.security.cert.PKIXRevocationChecker$Option" name="valueOf"><Arg>NO_FALLBACK</Arg></Call>
+        <Call class="java.security.cert.CertPathBuilder" name="getInstance">
+          <Arg>PKIX</Arg>
+          <Call id="pkixRevocationChecker" name="getRevocationChecker">
+            <Call name="setOptions">
+              <Arg>
+                <Call class="java.util.EnumSet" name="of">
+                  <Arg><Ref refid="pkixPreferCrls"/></Arg>
+                  <Arg><Ref refid="pkixSoftFail"/></Arg>
+                  <Arg><Ref refid="pkixNoFallback"/></Arg>
+                </Call>
+              </Arg>
+            </Call>
+          </Call>
+        </Call>
+        <Set name="PkixCertPathChecker"><Ref refid="pkixRevocationChecker"/></Set>
+        -->
+      </New>
+    </Arg>
+  </Call>
+</Configure>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.