resources/conf/jetty.xml

9c8c2c05a3d08f94d29b4a42b8a0506a4e97e4faLaszlo Hordos<?xml version="1.0"?>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure_9_0.dtd">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici<!--
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    ~ The contents of this file are subject to the terms of the Common Development and
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    ~ Distribution License (the License). You may not use this file except in compliance with the
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    ~ License.
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    ~
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    ~ You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    ~ specific language governing permission and limitations under the License.
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    ~
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    ~ When distributing Covered Software, include this CDDL Header Notice in each file and include
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    ~ the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    ~ Header, with the fields enclosed by brackets [] replaced by your own identifying
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    ~ information: "Portions copyright [year] [name of copyright owner]".
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    ~
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    ~ Copyright 2015 ForgeRock AS.
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici-->
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici<Configure id="Server" class="org.eclipse.jetty.server.Server">
9c8c2c05a3d08f94d29b4a42b8a0506a4e97e4faLaszlo Hordos
9c8c2c05a3d08f94d29b4a42b8a0506a4e97e4faLaszlo Hordos    <!-- =========================================================== -->
9c8c2c05a3d08f94d29b4a42b8a0506a4e97e4faLaszlo Hordos    <!-- Set connectors                                              -->
9c8c2c05a3d08f94d29b4a42b8a0506a4e97e4faLaszlo Hordos    <!-- =========================================================== -->
9c8c2c05a3d08f94d29b4a42b8a0506a4e97e4faLaszlo Hordos    <!-- One of each type!                                           -->
9c8c2c05a3d08f94d29b4a42b8a0506a4e97e4faLaszlo Hordos    <!-- =========================================================== -->
9c8c2c05a3d08f94d29b4a42b8a0506a4e97e4faLaszlo Hordos
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    <!--<Arg name="threadpool">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <New class="org.eclipse.jetty.util.thread.QueuedThreadPool">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Arg name="maxThreads">500</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Arg name="minThreads">50</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Arg name="idleTimeout">60000</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Arg name="queue">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <New class="java.util.concurrent.ArrayBlockingQueue">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    <Arg type="int">6000</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                </New>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            </Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Set name="minThreads">50</Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Set name="maxThreads">500</Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Set name="detailedDump">false</Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        </New>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    </Arg>-->
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    <New id="httpConfig" class="org.eclipse.jetty.server.HttpConfiguration">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="outputBufferSize">32768</Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="requestHeaderSize">8192</Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="responseHeaderSize">8192</Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Call name="addCustomizer">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Arg><New class="org.eclipse.jetty.server.ForwardedRequestCustomizer"/></Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        </Call>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    </New>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    <New id="tlsHttpConfig" class="org.eclipse.jetty.server.HttpConfiguration">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Arg><Ref refid="httpConfig"/></Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="secureScheme">https</Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="securePort">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Call class="org.forgerock.openidm.jetty.Param"  name="getProperty">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg>openidm.port.https</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            </Call>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        </Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Call name="addCustomizer">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Arg><New class="org.eclipse.jetty.server.SecureRequestCustomizer"/></Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        </Call>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    </New>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    <New id="mutualAuthHttpConfig" class="org.eclipse.jetty.server.HttpConfiguration">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Arg><Ref refid="httpConfig"/></Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="secureScheme">https</Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="securePort">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Call class="org.forgerock.openidm.jetty.Param"  name="getProperty">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg>openidm.port.mutualauth</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            </Call>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        </Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Call name="addCustomizer">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Arg><New class="org.eclipse.jetty.server.SecureRequestCustomizer"/></Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        </Call>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    </New>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    <Array id="excludedCipherSuites" type="java.lang.String">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <!-- EXP-RC4-MD5  -->
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_RSA_EXPORT_WITH_RC4_40_MD5</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_DH_anon_EXPORT_WITH_RC4_40_MD5</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>TLS_KRB5_EXPORT_WITH_RC4_40_MD5</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <!-- EXP-EDH-RSA-DES-CBC-SHA or EXP-DHE-RSA-DES-CBC-SHA  -->
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <!-- EXP-DES-CBC-SHA -->
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_RSA_EXPORT_WITH_DES40_CBC_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA </Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <!-- DES-CBC-SHA -->
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_RSA_WITH_DES_CBC_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_DHE_RSA_WITH_DES_CBC_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_DHE_DSS_WITH_DES_CBC_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_DH_anon_WITH_DES_CBC_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>TLS_KRB5_WITH_DES_CBC_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <!--
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        EDH-RSA-DES-CBC-SHA or DHE-RSA-DES-CBC-SHA is excluded above
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_DHE_RSA_WITH_DES_CBC_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        -->
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <!-- RC4-MD5 -->
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_RSA_WITH_RC4_128_MD5</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_RSA_EXPORT_WITH_RC4_40_MD5</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_DH_anon_WITH_RC4_128_MD5</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_DH_anon_EXPORT_WITH_RC4_40_MD5</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>TLS_KRB5_WITH_RC4_128_MD5</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>TLS_KRB5_EXPORT_WITH_RC4_40_MD5</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <!-- RC4-SHA  -->
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>SSL_RSA_WITH_RC4_128_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>TLS_ECDH_ECDSA_WITH_RC4_128_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>TLS_ECDH_RSA_WITH_RC4_128_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>TLS_ECDHE_ECDSA_WITH_RC4_128_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>TLS_ECDHE_RSA_WITH_RC4_128_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>TLS_ECDH_anon_WITH_RC4_128_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>TLS_KRB5_WITH_RC4_128_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>TLS_KRB5_EXPORT_WITH_RC4_40_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <!--
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        ECDHE-RSA-RC4-SHA is excluded above
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Item>TLS_ECDHE_RSA_WITH_RC4_128_SHA</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        -->
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    </Array>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    <New id="sslContextFactory" class="org.eclipse.jetty.util.ssl.SslContextFactory">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="keyStorePath"><Get class="org.forgerock.openidm.jetty.Param" name="keystoreLocation"/></Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="keyStorePassword"><Get class="org.forgerock.openidm.jetty.Param" name="keystorePassword"/></Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="keyStoreType"><Get class="org.forgerock.openidm.jetty.Param" name="keystoreType"/></Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="trustStorePath"><Get class="org.forgerock.openidm.jetty.Param" name="truststoreLocation"/></Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="trustStorePassword"><Get class="org.forgerock.openidm.jetty.Param" name="truststorePassword"/></Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="wantClientAuth">true</Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="certAlias"><Get class="org.forgerock.openidm.jetty.Param" name="certAlias"/></Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="ExcludeProtocols">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Array type="java.lang.String">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Item>SSLv3</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            </Array>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        </Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="ExcludeCipherSuites">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Ref refid="excludedCipherSuites"/>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        </Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    </New>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    <New id="sslContextFactoryMutualAuth" class="org.eclipse.jetty.util.ssl.SslContextFactory">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="keyStorePath"><Get class="org.forgerock.openidm.jetty.Param" name="keystoreLocation"/></Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="keyStorePassword"><Get class="org.forgerock.openidm.jetty.Param" name="keystorePassword"/></Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="keyStoreType"><Get class="org.forgerock.openidm.jetty.Param" name="keystoreType"/></Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="trustStorePath"><Get class="org.forgerock.openidm.jetty.Param" name="truststoreLocation"/></Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="trustStorePassword"><Get class="org.forgerock.openidm.jetty.Param" name="truststorePassword"/></Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="needClientAuth">true</Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="certAlias"><Get class="org.forgerock.openidm.jetty.Param" name="certAlias"/></Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="ExcludeProtocols">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Array type="java.lang.String">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Item>SSLv3</Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            </Array>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        </Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        <Set name="ExcludeCipherSuites">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <Ref refid="excludedCipherSuites"/>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici        </Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    </New>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici
dd64d8e20831446341533528ce378356a6de0970Alin Brici    <Call name="addConnector">
dd64d8e20831446341533528ce378356a6de0970Alin Brici        <Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <New class="org.eclipse.jetty.server.ServerConnector">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="server"><Ref refid="Server" /></Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="executor"/>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="scheduler"/>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="bufferPool"/>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="acceptors" type="int">-1</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="selectors" type="int">-1</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="factories">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    <Array type="org.eclipse.jetty.server.ConnectionFactory">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                        <Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                            <New class="org.eclipse.jetty.server.HttpConnectionFactory">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                                <Arg name="config"><Ref refid="httpConfig" /></Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                            </New>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                        </Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    </Array>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                </Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Set name="port">
dd64d8e20831446341533528ce378356a6de0970Alin Brici                    <Call class="org.forgerock.openidm.jetty.Param"  name="getProperty">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                        <Arg>openidm.port.http</Arg>
dd64d8e20831446341533528ce378356a6de0970Alin Brici                    </Call>
dd64d8e20831446341533528ce378356a6de0970Alin Brici                </Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Set name="idleTimeout">300000</Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Set name="name">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    <Property name="jetty.host" default="0.0.0.0" />:<Call class="org.forgerock.openidm.jetty.Param"  name="getProperty">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    <Arg>openidm.port.http</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                </Call>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                </Set>
dd64d8e20831446341533528ce378356a6de0970Alin Brici            </New>
dd64d8e20831446341533528ce378356a6de0970Alin Brici        </Arg>
dd64d8e20831446341533528ce378356a6de0970Alin Brici    </Call>
dd64d8e20831446341533528ce378356a6de0970Alin Brici
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici    <Call id="sslConnector" name="addConnector">
dd64d8e20831446341533528ce378356a6de0970Alin Brici        <Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <New class="org.eclipse.jetty.server.ServerConnector">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="server"><Ref refid="Server" /></Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="executor"/>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="scheduler"/>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="bufferPool"/>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="acceptors" type="int">-1</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="selectors" type="int">-1</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="factories">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    <Array type="org.eclipse.jetty.server.ConnectionFactory">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                        <Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                            <New class="org.eclipse.jetty.server.SslConnectionFactory">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                                <Arg name="next">http/1.1</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                                <Arg name="sslContextFactory"><Ref refid="sslContextFactory"/></Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                            </New>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                        </Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                        <Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                            <New class="org.eclipse.jetty.server.HttpConnectionFactory">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                                <Arg name="config"><Ref refid="tlsHttpConfig"/></Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                            </New>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                        </Item>
ddce63e9611721617e06c49dbd55433dba126cc2Jason Lemay                    </Array>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                </Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Set name="port">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    <Call class="org.forgerock.openidm.jetty.Param"  name="getProperty">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                        <Arg>openidm.port.https</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    </Call>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                </Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Set name="idleTimeout">30000</Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Set name="name">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    <Property name="jetty.host" default="0.0.0.0" />:<Call class="org.forgerock.openidm.jetty.Param"  name="getProperty">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    <Arg>openidm.port.https</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                </Call>
2ef6d8cf656e55df3ec41fdda4c241f4f592819bJason Lemay                </Set>
dd64d8e20831446341533528ce378356a6de0970Alin Brici            </New>
dd64d8e20831446341533528ce378356a6de0970Alin Brici        </Arg>
dd64d8e20831446341533528ce378356a6de0970Alin Brici    </Call>
dd64d8e20831446341533528ce378356a6de0970Alin Brici
dd64d8e20831446341533528ce378356a6de0970Alin Brici    <Call name="addConnector">
dd64d8e20831446341533528ce378356a6de0970Alin Brici        <Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici            <New class="org.eclipse.jetty.server.ServerConnector" id="MutualAuthPort">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="server"><Ref refid="Server" /></Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Arg name="factories">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    <Array type="org.eclipse.jetty.server.ConnectionFactory">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                        <Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                            <New class="org.eclipse.jetty.server.SslConnectionFactory">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                                <Arg name="next">http/1.1</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                                <Arg name="sslContextFactory">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                                    <Ref refid="sslContextFactoryMutualAuth"/>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                                </Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                            </New>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                        </Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                        <Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                            <New class="org.eclipse.jetty.server.HttpConnectionFactory">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                                <Arg name="config"><Ref refid="mutualAuthHttpConfig"/></Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                            </New>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                        </Item>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    </Array>
76aad4baea07ea3b15223ae2284185c215b304fcJake Feasel                </Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Set name="port">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    <Call class="org.forgerock.openidm.jetty.Param"  name="getProperty">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                        <Arg>openidm.port.mutualauth</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    </Call>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                </Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Set name="idleTimeout">30000</Set>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                <Set name="name">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    <Property name="jetty.host" default="0.0.0.0" />:<Call class="org.forgerock.openidm.jetty.Param"  name="getProperty">
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                    <Arg>openidm.port.mutualauth</Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                </Call>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                </Set>
3e7f5d1d7f53cd235d54f7052aa81f4426e043bfNicolasPhilippe                <!--Call class="org.forgerock.openidm.jetty.DisableOpenIDMAuth"
3e7f5d1d7f53cd235d54f7052aa81f4426e043bfNicolasPhilippe        name="add">
dd64d8e20831446341533528ce378356a6de0970Alin Brici                    <Arg>
af23b07763760931e46b353308cb5c744d1e3bf0Alin Brici                        <Ref refid="MutualAuthPort"/>
dd64d8e20831446341533528ce378356a6de0970Alin Brici                    </Arg>
3e7f5d1d7f53cd235d54f7052aa81f4426e043bfNicolasPhilippe                </Call-->
dd64d8e20831446341533528ce378356a6de0970Alin Brici            </New>
dd64d8e20831446341533528ce378356a6de0970Alin Brici        </Arg>
dd64d8e20831446341533528ce378356a6de0970Alin Brici    </Call>
9c8c2c05a3d08f94d29b4a42b8a0506a4e97e4faLaszlo Hordos
55bb82d605d054ef979dfd6c70325ad5f9936ad3Andi Egloff</Configure>
55bb82d605d054ef979dfd6c70325ad5f9936ad3Andi Egloff