server-webapp/src/main/webapp/WEB-INF/secure.xml

<?xml version="1.0" encoding="UTF-8"?>
<!-- Copyright (C) 2010-2012 The University of Manchester See the file "LICENSE" 
	for license terms. -->
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:context="http://www.springframework.org/schema/context"
	xmlns:util="http://www.springframework.org/schema/util"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:security="http://www.springframework.org/schema/security"
	xsi:schemaLocation="
	http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd
	http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util-3.1.xsd
	http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.1.xsd
	http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd">

	<description>
		The Taverna Server bean, plus supporting configuration.
		THIS IS THE CONFIGURATION FOR SECURE OPERATION.
	</description>

	<import resource="webappBeans.xml" />

	<context:property-placeholder order="0" ignore-unresolvable="true"
		 properties-ref="security.override.properties" />
	<util:properties id="security.override.properties">
		<prop key="fetchCertificateChain">true</prop>
		<prop key="suppressRewriteEngine">false</prop>
		<prop key="requiredChannel">https</prop>
	</util:properties>

	<bean id="MBeanServer" class="org.springframework.jmx.support.MBeanServerFactoryBean">
		<property name="locateExistingServerIfPossible" value="true" />
	</bean>
	<context:mbean-export server="MBeanServer"
		default-domain="${my.domain}" registration="ignoreExisting" />
</beans>