[java-idp-jetty-base] 02/04: IDP-2297 Explore extending the Plugin and Module Infrastructure to allow Jetty installation

[Rod Widdowson]

This is an automated email from the git hooks/post-receive script.

rdw pushed a commit to branch dev/IDP-2297
in repository java-idp-jetty-base.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-jetty-base.git;a=commit;h=a1259e439cd5f44277320957300f74b5f55cd262

commit a1259e439cd5f44277320957300f74b5f55cd262
Author: Rod Widdowson <rdw at steadingsoftware.com>
AuthorDate: Wed Oct 16 14:12:27 2024 +0100

    IDP-2297 Explore extending the Plugin and Module Infrastructure to allow Jetty installation
    
    https://shibboleth.atlassian.net/issues/IDP-2297
    
    Add back in a bunch of stuff (mostly empty directories) that feature
    in the legacy jetty-base
---
 .../module/jetty-base/credentials/.gitkeep         |   0
 .../module/jetty-base/etc/idp-backchannel.xml      |  62 +++++++++++++++++++++
 .../lib/idp-backchannel/jetty94-dta-ssl-1.0.0.jar  | Bin 0 -> 5503 bytes
 .../jettybase/module/jetty-base/logs/.gitkeep      |   0
 .../jettybase/module/jetty-base/tmp/.gitkeep       |   0
 5 files changed, 62 insertions(+)

diff --git a/jetty-base-impl/src/main/resources/net/shibboleth/idp/plugin/jettybase/module/jetty-base/credentials/.gitkeep b/jetty-base-impl/src/main/resources/net/shibboleth/idp/plugin/jettybase/module/jetty-base/credentials/.gitkeep
new file mode 100644
index 0000000..e69de29
diff --git a/jetty-base-impl/src/main/resources/net/shibboleth/idp/plugin/jettybase/module/jetty-base/etc/idp-backchannel.xml b/jetty-base-impl/src/main/resources/net/shibboleth/idp/plugin/jettybase/module/jetty-base/etc/idp-backchannel.xml
new file mode 100644
index 0000000..e242ced
--- /dev/null
+++ b/jetty-base-impl/src/main/resources/net/shibboleth/idp/plugin/jettybase/module/jetty-base/etc/idp-backchannel.xml
@@ -0,0 +1,62 @@
+<?xml version="1.0"?>
+<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "https://www.eclipse.org/jetty/configure_10_0.dtd">
+<Configure id="Server" class="org.eclipse.jetty.server.Server">
+  <!-- ============================================================= -->
+  <!-- TLS context factory with optional client auth                 -->
+  <!-- and no container trust (delegate to application)              -->
+  <!-- for backchannel (SOAP) communication to IdP                   -->
+  <!-- ============================================================= -->
+  <New id="shibContextFactory" class="net.shibboleth.utilities.jetty94.DelegateToApplicationSslContextFactory">
+    <Set name="KeyStorePath"><Property name="idp.backchannel.keyStorePath" default="credentials/idp-backchannel.p12" /></Set>
+    <Set name="KeyStoreType"><Property name="idp.backchannel.keyStoreType" default="PKCS12" /></Set>
+    <Set name="KeyStorePassword"><Property name="idp.backchannel.keyStorePassword" default="changeit" /></Set>
+    <Set name="EndpointIdentificationAlgorithm"></Set>
+    <Set name="renegotiationAllowed">false</Set>
+    <Set name="useCipherSuitesOrder">true</Set>
+  </New>
+
+  <New id="shibHttpConfig" class="org.eclipse.jetty.server.HttpConfiguration">
+    <Arg><Ref refid="httpConfig"/></Arg>
+    <Call name="addCustomizer">
+      <Arg>
+        <New class="org.eclipse.jetty.server.SecureRequestCustomizer">
+          <Arg type="boolean"><Property name="jetty.ssl.sniHostCheck" default="true"/></Arg>
+        </New>
+      </Arg>
+    </Call>
+  </New>
+
+  <!-- ============================================================= -->
+  <!-- IdP SOAP protocol connector                                   -->
+  <!-- ============================================================= -->
+  <Call id="shibConnector" name="addConnector">
+    <Arg>
+      <New class="org.eclipse.jetty.server.ServerConnector">
+        <Arg name="server"><Ref refid="Server" /></Arg>
+        <Arg name="acceptors" type="int"><Property name="jetty.ssl.acceptors" default="-1"/></Arg>
+        <Arg name="selectors" type="int"><Property name="jetty.ssl.selectors" default="-1"/></Arg>
+        <Arg name="factories">
+          <Array type="org.eclipse.jetty.server.ConnectionFactory">
+            <Item>
+              <New class="org.eclipse.jetty.server.SslConnectionFactory">
+                <Arg name="next">http/1.1</Arg>
+                <Arg name="sslContextFactory"><Ref refid="shibContextFactory"/></Arg>
+              </New>
+            </Item>
+            <Item>
+              <New class="org.eclipse.jetty.server.HttpConnectionFactory">
+                <Arg name="config"><Ref refid="shibHttpConfig"/></Arg>
+              </New>
+            </Item>
+          </Array>
+        </Arg>
+        <Set name="host"><Property name="jetty.ssl.host" default="0.0.0.0" /></Set>
+        <Set name="port"><Property name="idp.backchannel.port" default="8443" /></Set>
+        <Set name="idleTimeout"><Property name="jetty.ssl.timeout" default="30000"/></Set>
+        <Set name="acceptorPriorityDelta"><Property name="jetty.ssl.acceptorPriorityDelta" default="0"/></Set>
+        <Set name="acceptQueueSize"><Property name="jetty.ssl.acceptQueueSize" default="0"/></Set>
+      </New>
+    </Arg>
+  </Call>
+
+</Configure>
diff --git a/jetty-base-impl/src/main/resources/net/shibboleth/idp/plugin/jettybase/module/jetty-base/lib/idp-backchannel/jetty94-dta-ssl-1.0.0.jar b/jetty-base-impl/src/main/resources/net/shibboleth/idp/plugin/jettybase/module/jetty-base/lib/idp-backchannel/jetty94-dta-ssl-1.0.0.jar
new file mode 100644
index 0000000..bd7b281
Binary files /dev/null and b/jetty-base-impl/src/main/resources/net/shibboleth/idp/plugin/jettybase/module/jetty-base/lib/idp-backchannel/jetty94-dta-ssl-1.0.0.jar differ
diff --git a/jetty-base-impl/src/main/resources/net/shibboleth/idp/plugin/jettybase/module/jetty-base/logs/.gitkeep b/jetty-base-impl/src/main/resources/net/shibboleth/idp/plugin/jettybase/module/jetty-base/logs/.gitkeep
new file mode 100644
index 0000000..e69de29
diff --git a/jetty-base-impl/src/main/resources/net/shibboleth/idp/plugin/jettybase/module/jetty-base/tmp/.gitkeep b/jetty-base-impl/src/main/resources/net/shibboleth/idp/plugin/jettybase/module/jetty-base/tmp/.gitkeep
new file mode 100644
index 0000000..e69de29

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.