odf/jettyconfig/jetty-ssl.xml

<?xml version="1.0"?>
<!--
~
~ Licensed under the Apache License, Version 2.0 (the "License");
~ you may not use this file except in compliance with the License.
~ You may obtain a copy of the License at
~
~   http://www.apache.org/licenses/LICENSE-2.0
~
~ Unless required by applicable law or agreed to in writing, software
~ distributed under the License is distributed on an "AS IS" BASIS,
~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
~ See the License for the specific language governing permissions and
~ limitations under the License.
-->
<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure_9_0.dtd">
<Configure id="sslContextFactory" class="org.eclipse.jetty.util.ssl.SslContextFactory">
	<Set name="KeyStorePath"><Property name="jetty.config.dir" default="../target/jettyconfig" />/keystore.jks</Set>
	<Set name="KeyStorePassword">OBF:20zh1zsv1kjo1lca1lf81kmy1zsv20zl</Set>
	<Set name="KeyManagerPassword">OBF:20zh1zsv1kjo1lca1lf81kmy1zsv20zl</Set>
	<Set name="TrustStorePath"><Property name="jetty.config.dir" default="../target/jettyconfig" />/keystore.jks</Set>
	<Set name="TrustStorePassword">OBF:20zh1zsv1kjo1lca1lf81kmy1zsv20zl</Set>
	<Set name="EndpointIdentificationAlgorithm"></Set>
	<Set name="ExcludeCipherSuites">
		<Array type="String">
			<Item>SSL_RSA_WITH_DES_CBC_SHA</Item>
			<Item>SSL_DHE_RSA_WITH_DES_CBC_SHA</Item>
			<Item>SSL_DHE_DSS_WITH_DES_CBC_SHA</Item>
			<Item>SSL_RSA_EXPORT_WITH_RC4_40_MD5</Item>
			<Item>SSL_RSA_EXPORT_WITH_DES40_CBC_SHA</Item>
			<Item>SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA</Item>
			<Item>SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA</Item>
		</Array>
	</Set>
	<New id="sslHttpConfig" class="org.eclipse.jetty.server.HttpConfiguration">
		<Arg>
			<Ref refid="httpConfig" />
		</Arg>
		<Call name="addCustomizer">
			<Arg>
				<New class="org.eclipse.jetty.server.SecureRequestCustomizer" />
			</Arg>
		</Call>
	</New>
</Configure>