View difference between Paste ID: iE9xqcLq and f1ZK92AE
SHOW: | | - or go back to the newest paste.
1
<?xml version="1.0"?>
2
<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure_9_0.dtd">
3
4
<!-- ============================================================= -->
5
<!-- Configure the Jetty Server instance with an ID "Server"       -->
6
<!-- by adding a HTTPS connector.                                  -->
7
<!-- This configuration must be used in conjunction with jetty.xml -->
8
<!-- It should not be used with jetty-spdy.xml which can provide   -->
9
<!-- both HTTPS and SPDY connections                               -->
10
<!-- ============================================================= -->
11
<Configure id="Server" class="org.eclipse.jetty.server.Server">
12
13
	<!-- Esto cogido de http://git.eclipse.org/c/jetty/org.eclipse.jetty.project.git/plain/jetty-server/src/main/config/etc/jetty.xml -->
14
	
15
16
    <!-- =========================================================== -->
17
    <!-- Http Configuration.                                         -->
18
    <!-- This is a common configuration instance used by all         -->
19
    <!-- connectors that can carry HTTP semantics (HTTP, HTTPS, SPDY)-->
20
    <!-- It configures the non wire protocol aspects of the HTTP     -->
21
    <!-- semantic.                                                   -->
22
    <!--                                                             -->
23
    <!-- This configuration is only defined here and is used by      -->
24
    <!-- reference from the jetty-http.xml, jetty-https.xml and      -->
25
    <!-- jetty-spdy.xml configuration files which instantiate the    -->
26
    <!-- connectors.                                                 -->
27
    <!--                                                             -->
28
    <!-- Consult the javadoc of o.e.j.server.HttpConfiguration       -->
29
    <!-- for all configuration that may be set here.                 -->
30
    <!-- =========================================================== -->
31
    <New id="httpConfig" class="org.eclipse.jetty.server.HttpConfiguration">
32
      <Set name="secureScheme">https</Set>
33
      <Set name="securePort"><Property name="jetty.tls.port" default="8443" /></Set>
34
      <Set name="outputBufferSize">32768</Set>
35
      <Set name="requestHeaderSize">8192</Set>
36
      <Set name="responseHeaderSize">8192</Set>
37
      
38
      <!-- Uncomment to enable handling of X-Forwarded- style headers 
39
      <Call name="addCustomizer">
40
        <Arg><New class="org.eclipse.jetty.server.ForwardedRequestCustomizer"/></Arg>
41
      </Call>
42
      -->
43
    </New>
44
    
45
46
	
47
    <!-- =========================================================== -->
48
    <!-- Set the default handler structure for the Server            -->
49
    <!-- A handler collection is used to pass received requests to   -->
50
    <!-- both the ContextHandlerCollection, which selects the next   -->
51
    <!-- handler by context path and virtual host, and the           -->
52
    <!-- DefaultHandler, which handles any requests not handled by   -->
53
    <!-- the context handlers.                                       -->
54
    <!-- Other handlers may be added to the "Handlers" collection,   -->
55
    <!-- for example the jetty-requestlog.xml file adds the          --> 
56
    <!-- RequestLogHandler after the default handler                 -->
57
    <!-- =========================================================== -->
58
    <Set name="handler">
59
      <New id="Handlers" class="org.eclipse.jetty.server.handler.HandlerCollection">
60
        <Set name="handlers">
61
         <Array type="org.eclipse.jetty.server.Handler">
62
           <Item>
63
             <New id="Contexts" class="org.eclipse.jetty.server.handler.ContextHandlerCollection"/>
64
           </Item>
65
           <Item>
66
             <New id="DefaultHandler" class="org.eclipse.jetty.server.handler.DefaultHandler"/>
67
           </Item>
68
         </Array>
69
        </Set>
70
      </New>
71
    </Set>
72
73
74
75
	<!-- Fin jetty.xml -->
76
	<!-- Comienza jetty-https.xml -->
77
78
  <!-- =========================================================== -->
79
  <!-- Setup the SSL Context factory used to establish all TLS     -->
80
  <!-- Connections and session.                                    -->
81
  <!--                                                             -->
82
  <!-- Consult the javadoc of o.e.j.util.ssl.SslContextFactory     -->
83
  <!-- o.e.j.server.HttpConnectionFactory for all configuration    -->
84
  <!-- that may be set here.                                       -->
85
  <!-- =========================================================== -->
86
  <!-- 
87
  <New id="sslContextFactory" class="org.eclipse.jetty.util.ssl.SslContextFactory">
88
    <Set name="KeyStorePath"><Property name="jetty.home" default="." />/etc/keystore</Set>
89
    <Set name="KeyStorePassword">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
90
    <Set name="KeyManagerPassword">OBF:1u2u1wml1z7s1z7a1wnl1u2g</Set>
91
    <Set name="TrustStorePath"><Property name="jetty.home" default="." />/etc/keystore</Set>
92
    <Set name="TrustStorePassword">OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4</Set>
93
  </New>
94
   -->
95
   
96
   <!-- TODO: Mejorar paths y ofuscar contraseñas
97
   http://docs.codehaus.org/display/JETTY/Securing+Passwords 
98
   -->
99
   <New id="sslContextFactory" class="org.eclipse.jetty.util.ssl.SslContextFactory">
100
    <Set name="KeyStorePath"><Property name="jetty.home" default="." />/target/jetty-ssl.keystore</Set>
101
    <Set name="KeyStorePassword">******</Set>
102-
    <Set name="KeyManagerPassword">jetty6</Set>
102+
    <Set name="KeyManagerPassword">******</Set>
103
    <Set name="TrustStorePath"><Property name="jetty.home" default="." />/src/main/resources/entidades.truststore</Set>
104
    <Set name="TrustStorePassword">*******</Set>
105
    <!--<Set name="wantClientAuth">true</Set>-->
106
    <!-- <Set name="needClientAuth">true</Set>  -->
107
    <Set name="protocol">TLSv1</Set>
108
  </New>
109
  
110
  
111
  
112
  <!-- =========================================================== -->
113
  <!-- Create a TLS specific HttpConfiguration based on the        -->
114
  <!-- common HttpConfiguration defined in jetty.xml               -->
115
  <!-- Add a SecureRequestCustomizer to extract certificate and    -->
116
  <!-- session information                                         -->
117
  <!-- =========================================================== -->
118
  <New id="tlsHttpConfig" class="org.eclipse.jetty.server.HttpConfiguration">
119
    <Arg><Ref id="httpConfig"/></Arg>
120
    <Call name="addCustomizer">
121
      <Arg><New class="org.eclipse.jetty.server.SecureRequestCustomizer"/></Arg>
122
    </Call>
123
  </New>
124
125
126
  <!-- =========================================================== -->
127
  <!-- Add a HTTPS Connector.                                      -->
128
  <!-- Configure an o.e.j.server.ServerConnector with connection   -->
129
  <!-- factories for TLS (aka SSL) and HTTP to provide HTTPS.      -->
130
  <!-- All accepted TLS connections are wired to a HTTP connection.-->
131
  <!--                                                             -->
132
  <!-- Consult the javadoc of o.e.j.server.ServerConnector,        -->
133
  <!-- o.e.j.server.SslConnectionFactory and                       -->
134
  <!-- o.e.j.server.HttpConnectionFactory for all configuration    -->
135
  <!-- that may be set here.                                       -->
136
  <!-- =========================================================== -->
137
  <Call id="sslConnector" name="addConnector">
138
    <Arg>
139
      <New class="org.eclipse.jetty.server.ServerConnector">
140
        <Arg name="server"><Ref id="Server" /></Arg>
141
          <Arg name="factories">
142
            <Array type="org.eclipse.jetty.server.ConnectionFactory">
143
              <Item>
144
                <New class="org.eclipse.jetty.server.SslConnectionFactory">
145
                  <Arg name="next">http/1.1</Arg>
146
                  <Arg name="sslContextFactory"><Ref id="sslContextFactory"/></Arg>
147
                </New>
148
              </Item>
149
              <Item>
150
                <New class="org.eclipse.jetty.server.HttpConnectionFactory">
151
                  <Arg name="config"><Ref id="tlsHttpConfig"/></Arg>
152
                </New>
153
              </Item>
154
            </Array>
155
          </Arg>
156
          <Set name="host"><Property name="jetty.host" /></Set>
157
          <Set name="port"><Property name="jetty.tls.port" default="8443" /></Set>
158
          <Set name="idleTimeout">30000</Set>
159
        </New>
160
    </Arg>
161
  </Call>
162
  
163
 </Configure>