Issue #519 Disable SSL session caching
Made caching parameters configurable
This commit is contained in:
parent
ef84beb7d4
commit
e783777d1c
|
@ -4,6 +4,12 @@
|
|||
<!-- ============================================================= -->
|
||||
<!-- SSL ContextFactory configuration -->
|
||||
<!-- ============================================================= -->
|
||||
|
||||
<!--
|
||||
To configure Includes / Excludes for Cipher Suites or Protocols see tweak-ssl.xml example at
|
||||
https://www.eclipse.org/jetty/documentation/current/configuring-ssl.html#configuring-sslcontextfactory-cipherSuites
|
||||
-->
|
||||
|
||||
<Configure id="sslContextFactory" class="org.eclipse.jetty.util.ssl.SslContextFactory">
|
||||
<Set name="KeyStorePath"><Property name="jetty.base" default="." />/<Property name="jetty.sslContext.keyStorePath" deprecated="jetty.keystore" default="etc/keystore"/></Set>
|
||||
<Set name="KeyStorePassword"><Property name="jetty.sslContext.keyStorePassword" deprecated="jetty.keystore.password" default="OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4"/></Set>
|
||||
|
@ -17,8 +23,7 @@
|
|||
<Set name="EndpointIdentificationAlgorithm"></Set>
|
||||
<Set name="NeedClientAuth"><Property name="jetty.sslContext.needClientAuth" deprecated="jetty.ssl.needClientAuth" default="false"/></Set>
|
||||
<Set name="WantClientAuth"><Property name="jetty.sslContext.wantClientAuth" deprecated="jetty.ssl.wantClientAuth" default="false"/></Set>
|
||||
<!-- To configure Includes / Excludes for Cipher Suites or Protocols see tweak-ssl.xml example at
|
||||
https://www.eclipse.org/jetty/documentation/current/configuring-ssl.html#configuring-sslcontextfactory-cipherSuites
|
||||
-->
|
||||
<Set name="useCipherSuitesOrder"><Property name="jetty.sslContext.useCipherSuitesOrder" default="true"/></Set>
|
||||
<Set name="sslSessionCacheSize"><Property name="jetty.sslContext.sslSessionCacheSize" default="-1"/></Set>
|
||||
<Set name="sslSessionTimeout"><Property name="jetty.sslContext.sslSessionTimeout" default="-1"/></Set>
|
||||
</Configure>
|
||||
|
|
|
@ -89,3 +89,9 @@ https://raw.githubusercontent.com/eclipse/jetty.project/master/jetty-server/src/
|
|||
|
||||
## To configure Includes / Excludes for Cipher Suites or Protocols see tweak-ssl.xml example at
|
||||
## https://www.eclipse.org/jetty/documentation/current/configuring-ssl.html#configuring-sslcontextfactory-cipherSuites
|
||||
|
||||
## Set the size of the SslSession cache
|
||||
# jetty.sslContext.sslSessionCacheSize=-1
|
||||
|
||||
## Set the timeout (in seconds) of the SslSession cache timeout
|
||||
# jetty.sslContext.sslSessionTimeout=-1
|
||||
|
|
Loading…
Reference in New Issue