diff options
| author | Sam Wilkins <samwilkins333@gmail.com> | 2019-07-31 03:39:55 -0400 |
|---|---|---|
| committer | Sam Wilkins <samwilkins333@gmail.com> | 2019-07-31 03:39:55 -0400 |
| commit | 7e8778b06dacab6e9e6dedc562c10898f7075a3b (patch) | |
| tree | 744d33c145c7325b3785e865517f5add7fb7a857 /solr-8.1.1/server/etc/jetty-ssl.xml | |
| parent | 8a87f7110b56ca96b3960f6fb3917c7ed8c7a814 (diff) | |
| parent | b6fa309cea934d250fe992e70e1e268f344659b5 (diff) | |
merged with master
Diffstat (limited to 'solr-8.1.1/server/etc/jetty-ssl.xml')
| -rw-r--r-- | solr-8.1.1/server/etc/jetty-ssl.xml | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/solr-8.1.1/server/etc/jetty-ssl.xml b/solr-8.1.1/server/etc/jetty-ssl.xml new file mode 100644 index 000000000..9ff5accf4 --- /dev/null +++ b/solr-8.1.1/server/etc/jetty-ssl.xml @@ -0,0 +1,36 @@ +<?xml version="1.0"?> +<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure_9_0.dtd"> + +<!-- ============================================================= --> +<!-- Configure a TLS (SSL) Context Factory --> +<!-- This configuration must be used in conjunction with jetty.xml --> +<!-- and either jetty-https.xml or jetty-spdy.xml (but not both) --> +<!-- ============================================================= --> +<Configure id="sslContextFactory" class="org.eclipse.jetty.util.ssl.SslContextFactory"> + <Call class="org.apache.solr.util.configuration.SSLConfigurationsFactory" name="current"> + <Get name="keyStorePassword" id="keyStorePassword"/> + <Get name="trustStorePassword" id="trustStorePassword"/> + </Call> + <Set name="KeyStorePath"><Property name="solr.jetty.keystore" default="./etc/solr-ssl.keystore.jks"/></Set> + <Set name="KeyStorePassword"><Ref refid="keyStorePassword"/></Set> + <Set name="TrustStorePath"><Property name="solr.jetty.truststore" default="./etc/solr-ssl.keystore.jks"/></Set> + <Set name="TrustStorePassword"><Ref refid="trustStorePassword"/></Set> + <Set name="NeedClientAuth"><Property name="solr.jetty.ssl.needClientAuth" default="false"/></Set> + <Set name="WantClientAuth"><Property name="solr.jetty.ssl.wantClientAuth" default="false"/></Set> + <Set name="KeyStoreType"><Property name="solr.jetty.keystore.type" default="JKS"/></Set> + <Set name="TrustStoreType"><Property name="solr.jetty.truststore.type" default="JKS"/></Set> + + <!-- =========================================================== --> + <!-- Create a TLS specific HttpConfiguration based on the --> + <!-- common HttpConfiguration defined in jetty.xml --> + <!-- Add a SecureRequestCustomizer to extract certificate and --> + <!-- session information --> + <!-- =========================================================== --> + <New id="sslHttpConfig" class="org.eclipse.jetty.server.HttpConfiguration"> + <Arg><Ref refid="httpConfig"/></Arg> + <Call name="addCustomizer"> + <Arg><New class="org.eclipse.jetty.server.SecureRequestCustomizer"/></Arg> + </Call> + </New> + +</Configure> |
