Skip to content

Commit

Permalink
feat: Use networking standard config (improved) (V3) (#3765)
Browse files Browse the repository at this point in the history 
* add logic to extract enabled protocols and refactor

Signed-off-by: Andrea Tabone <andrea.tabone@broadcom.com>

* updated scripts to be in POSIX, and added missing parameters update from Sean PR

Signed-off-by: Elena Kubantseva <elena.kubantseva@broadcom.com>

---------

Signed-off-by: Andrea Tabone <andrea.tabone@broadcom.com>
Signed-off-by: Elena Kubantseva <elena.kubantseva@broadcom.com>
Co-authored-by: Andrea Tabone <andrea.tabone@broadcom.com>
  • Loading branch information
@arxioly @taban03
arxioly and taban03 authored Sep 13, 2024
1 parent 39e75b1 commit aef67a3
Show file tree
Hide file tree
Showing 6 changed files with 254 additions and 14 deletions.
54 changes: 51 additions & 3 deletions api-catalog-package/src/main/resources/bin/start.sh
View file
Original file line number Diff line number Diff line change
Expand Up @@ -160,6 +160,51 @@ if [ "$ATTLS_ENABLED" = "true" ]; then
ZWE_DISCOVERY_SERVICES_LIST=$(echo "${ZWE_DISCOVERY_SERVICES_LIST=}" | sed -e 's|https://|http://|g')
fi

get_enabled_protocol_limit() {
target=$1
type=$2
key_component="ZWE_configs_zowe_network_${target}_tls_${type}Tls"
value_component=$(eval echo \$$key_component)
key_gateway="ZWE_components_gateway_zowe_network_${target}_tls_${type}Tls"
value_gateway=$(eval echo \$$key_gateway)
key_zowe="ZWE_zowe_network_${target}_tls_${type}Tls"
value_zowe=$(eval echo \$$key_zowe)
enabled_protocol_limit=${value_component:-${value_gateway:-${value_zowe:-}}}
}

extract_between() {
echo "$1" | sed -e "s/.*$2,//" -e "s/$3.*//"
}

get_enabled_protocol() {
target=$1
get_enabled_protocol_limit "${target}" "min"
enabled_protocols_min=${enabled_protocol_limit}
get_enabled_protocol_limit "${target}" "max"
enabled_protocols_max=${enabled_protocol_limit}

if [ "${enabled_protocols_min:-}" = "${enabled_protocols_max:-}" ]; then
result="${enabled_protocols_max:-}"
elif [ -z "${enabled_protocols_min:-}" ]; then
result="${enabled_protocols_max:-}"
else
enabled_protocols_max=${enabled_protocols_max:-"TLSv1.3"}
enabled_protocols=,TLSv1,TLSv1.1,TLSv1.2,TLSv1.3,TLSv1.4,
# Extract protocols between min and max (inclusive)
result=$(extract_between "$enabled_protocols" "$enabled_protocols_min" "$enabled_protocols_max")
result="$enabled_protocols_min,$result$enabled_protocols_max"
fi
}

get_enabled_protocol_limit "server" "max"
server_protocol=${enabled_protocol_limit:-"TLS"}
get_enabled_protocol "server"
server_enabled_protocols=${result:-"TLSv1.3"}
server_ciphers=${ZWE_configs_zowe_network_server_tls_ciphers:-${ZWE_components_gateway_zowe_network_server_tls_ciphers:-${ZWE_zowe_network_server_tls_ciphers:-TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384}}}
get_enabled_protocol "client"
client_enabled_protocols=${ZWE_components_gateway_apiml_httpclient_ssl_enabled_protocols:-${result:-${server_enabled_protocols}}}
client_ciphers=${ZWE_configs_zowe_network_client_tls_ciphers:-${ZWE_components_gateway_zowe_network_client_tls_ciphers:-${ZWE_zowe_network_client_tls_ciphers:-${server_ciphers}}}}

keystore_type="${ZWE_configs_certificate_keystore_type:-${ZWE_zowe_certificate_keystore_type:-PKCS12}}"
keystore_pass="${ZWE_configs_certificate_keystore_password:-${ZWE_zowe_certificate_keystore_password}}"
key_alias="${ZWE_configs_certificate_keystore_alias:-${ZWE_zowe_certificate_keystore_alias}}"
Expand Down Expand Up @@ -231,11 +276,14 @@ _BPX_JOBNAME=${ZWE_zowe_job_prefix}${CATALOG_CODE} ${JAVA_BIN_DIR}java \
-Dapiml.catalog.customStyle.headerColor=${ZWE_configs_apiml_catalog_customStyle_headerColor:-} \
-Dapiml.catalog.customStyle.textColor=${ZWE_configs_apiml_catalog_customStyle_textColor:-} \
-Dapiml.catalog.customStyle.docLink=${ZWE_configs_apiml_catalog_customStyle_docLink:-} \
-Dapiml.httpclient.ssl.enabled-protocols=${ZWE_components_gateway_apiml_httpclient_ssl_enabled_protocols:-"TLSv1.2"} \
-Dapiml.httpclient.ssl.enabled-protocols=${client_enabled_protocols} \
-Djdk.tls.client.cipherSuites=${client_ciphers} \
-Dserver.ssl.ciphers=${server_ciphers} \
-Dserver.ssl.protocol=${server_protocol} \
-Dserver.ssl.enabled-protocols=${server_enabled_protocols} \
-Dspring.profiles.include=$LOG_LEVEL \
-Dserver.address=0.0.0.0 \
-Dserver.address=${ZWE_configs_zowe_network_server_listenAddresses_0:-${ZWE_zowe_network_server_listenAddresses_0:-"0.0.0.0"}} \
-Dserver.ssl.enabled=${ZWE_configs_server_ssl_enabled:-true} \
-Dserver.ssl.protocol=${ZWE_configs_server_ssl_protocol:-"TLSv1.2"} \
-Dserver.ssl.keyStore="${keystore_location}" \
-Dserver.ssl.keyStoreType="${keystore_type}" \
-Dserver.ssl.keyStorePassword="${keystore_pass}" \
Expand Down
54 changes: 51 additions & 3 deletions caching-service-package/src/main/resources/bin/start.sh
View file
Original file line number Diff line number Diff line change
Expand Up @@ -142,6 +142,51 @@ if [ "${ATTLS_ENABLED}" = "true" ]; then
ZWE_DISCOVERY_SERVICES_LIST=$(echo "${ZWE_DISCOVERY_SERVICES_LIST=}" | sed -e 's|https://|http://|g')
fi

get_enabled_protocol_limit() {
target=$1
type=$2
key_component="ZWE_configs_zowe_network_${target}_tls_${type}Tls"
value_component=$(eval echo \$$key_component)
key_gateway="ZWE_components_gateway_zowe_network_${target}_tls_${type}Tls"
value_gateway=$(eval echo \$$key_gateway)
key_zowe="ZWE_zowe_network_${target}_tls_${type}Tls"
value_zowe=$(eval echo \$$key_zowe)
enabled_protocol_limit=${value_component:-${value_gateway:-${value_zowe:-}}}
}

extract_between() {
echo "$1" | sed -e "s/.*$2,//" -e "s/$3.*//"
}

get_enabled_protocol() {
target=$1
get_enabled_protocol_limit "${target}" "min"
enabled_protocols_min=${enabled_protocol_limit}
get_enabled_protocol_limit "${target}" "max"
enabled_protocols_max=${enabled_protocol_limit}

if [ "${enabled_protocols_min:-}" = "${enabled_protocols_max:-}" ]; then
result="${enabled_protocols_max:-}"
elif [ -z "${enabled_protocols_min:-}" ]; then
result="${enabled_protocols_max:-}"
else
enabled_protocols_max=${enabled_protocols_max:-"TLSv1.3"}
enabled_protocols=,TLSv1,TLSv1.1,TLSv1.2,TLSv1.3,TLSv1.4,
# Extract protocols between min and max (inclusive)
result=$(extract_between "$enabled_protocols" "$enabled_protocols_min" "$enabled_protocols_max")
result="$enabled_protocols_min,$result$enabled_protocols_max"
fi
}

get_enabled_protocol_limit "server" "max"
server_protocol=${enabled_protocol_limit:-"TLS"}
get_enabled_protocol "server"
server_enabled_protocols=${result:-"TLSv1.3"}
server_ciphers=${ZWE_configs_zowe_network_server_tls_ciphers:-${ZWE_components_gateway_zowe_network_server_tls_ciphers:-${ZWE_zowe_network_server_tls_ciphers:-TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384}}}
get_enabled_protocol "client"
client_enabled_protocols=${ZWE_components_gateway_apiml_httpclient_ssl_enabled_protocols:-${result:-${server_enabled_protocols}}}
client_ciphers=${ZWE_configs_zowe_network_client_tls_ciphers:-${ZWE_components_gateway_zowe_network_client_tls_ciphers:-${ZWE_zowe_network_client_tls_ciphers:-${server_ciphers}}}}

keystore_type="${ZWE_configs_certificate_keystore_type:-${ZWE_zowe_certificate_keystore_type:-PKCS12}}"
keystore_pass="${ZWE_configs_certificate_keystore_password:-${ZWE_zowe_certificate_keystore_password}}"
key_alias="${ZWE_configs_certificate_keystore_alias:-${ZWE_zowe_certificate_keystore_alias}}"
Expand Down Expand Up @@ -198,7 +243,11 @@ _BPX_JOBNAME=${ZWE_zowe_job_prefix}${CACHING_CODE} ${JAVA_BIN_DIR}java \
-Dapiml.service.customMetadata.apiml.gatewayPort=${ZWE_components_gateway_port:-7554} \
-Dapiml.service.ssl.verifySslCertificatesOfServices=${verifySslCertificatesOfServices:-false} \
-Dapiml.service.ssl.nonStrictVerifySslCertificatesOfServices=${nonStrictVerifySslCertificatesOfServices:-false} \
-Dapiml.httpclient.ssl.enabled-protocols=${ZWE_components_gateway_apiml_httpclient_ssl_enabled_protocols:-"TLSv1.2"} \
-Dapiml.httpclient.ssl.enabled-protocols=${client_enabled_protocols} \
-Djdk.tls.client.cipherSuites=${client_ciphers} \
-Dserver.ssl.ciphers=${server_ciphers} \
-Dserver.ssl.protocol=${server_protocol} \
-Dserver.ssl.enabled-protocols=${server_enabled_protocols} \
-Dcaching.storage.evictionStrategy=${ZWE_configs_storage_evictionStrategy:-reject} \
-Dcaching.storage.size=${ZWE_configs_storage_size:-10000} \
-Dcaching.storage.mode=${ZWE_configs_storage_mode:-inMemory} \
Expand All @@ -209,9 +258,8 @@ _BPX_JOBNAME=${ZWE_zowe_job_prefix}${CACHING_CODE} ${JAVA_BIN_DIR}java \
-Dcaching.storage.infinispan.persistence.dataLocation=${ZWE_configs_storage_infinispan_persistence_dataLocation:-data} \
-Dcaching.storage.infinispan.persistence.indexLocation=${ZWE_configs_storage_infinispan_persistence_indexLocation:-index} \
-Dcaching.storage.infinispan.initialHosts=${ZWE_configs_storage_infinispan_initialHosts:-localhost[7098]} \
-Dserver.address=0.0.0.0 \
-Dserver.address=${ZWE_configs_zowe_network_server_listenAddresses_0:-${ZWE_zowe_network_server_listenAddresses_0:-"0.0.0.0"}} \
-Dserver.ssl.enabled=${ZWE_configs_server_ssl_enabled:-true} \
-Dserver.ssl.protocol=${ZWE_configs_server_ssl_protocol:-"TLSv1.2"} \
-Dserver.ssl.keyStore="${keystore_location}" \
-Dserver.ssl.keyStoreType="${keystore_type}" \
-Dserver.ssl.keyStorePassword="${keystore_pass}" \
Expand Down
2 changes: 1 addition & 1 deletion discoverable-client/src/main/resources/application.yml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -150,7 +150,7 @@ server:
ssl:
enabled: true
clientAuth: want
protocol: TLSv1.2
protocol: TLSv1.3
enabled-protocols: TLSv1.2+TLSv1.3
ciphers: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384
keyStoreType: PKCS12
Expand Down
54 changes: 51 additions & 3 deletions discovery-package/src/main/resources/bin/start.sh
View file
Original file line number Diff line number Diff line change
Expand Up @@ -150,6 +150,51 @@ ADD_OPENS="--add-opens=java.base/java.lang=ALL-UNNAMED
--add-opens=java.base/sun.nio.ch=ALL-UNNAMED
--add-opens=java.base/java.io=ALL-UNNAMED"

get_enabled_protocol_limit() {
target=$1
type=$2
key_component="ZWE_configs_zowe_network_${target}_tls_${type}Tls"
value_component=$(eval echo \$$key_component)
key_gateway="ZWE_components_gateway_zowe_network_${target}_tls_${type}Tls"
value_gateway=$(eval echo \$$key_gateway)
key_zowe="ZWE_zowe_network_${target}_tls_${type}Tls"
value_zowe=$(eval echo \$$key_zowe)
enabled_protocol_limit=${value_component:-${value_gateway:-${value_zowe:-}}}
}

extract_between() {
echo "$1" | sed -e "s/.*$2,//" -e "s/$3.*//"
}

get_enabled_protocol() {
target=$1
get_enabled_protocol_limit "${target}" "min"
enabled_protocols_min=${enabled_protocol_limit}
get_enabled_protocol_limit "${target}" "max"
enabled_protocols_max=${enabled_protocol_limit}

if [ "${enabled_protocols_min:-}" = "${enabled_protocols_max:-}" ]; then
result="${enabled_protocols_max:-}"
elif [ -z "${enabled_protocols_min:-}" ]; then
result="${enabled_protocols_max:-}"
else
enabled_protocols_max=${enabled_protocols_max:-"TLSv1.3"}
enabled_protocols=,TLSv1,TLSv1.1,TLSv1.2,TLSv1.3,TLSv1.4,
# Extract protocols between min and max (inclusive)
result=$(extract_between "$enabled_protocols" "$enabled_protocols_min" "$enabled_protocols_max")
result="$enabled_protocols_min,$result$enabled_protocols_max"
fi
}

get_enabled_protocol_limit "server" "max"
server_protocol=${enabled_protocol_limit:-"TLS"}
get_enabled_protocol "server"
server_enabled_protocols=${result:-"TLSv1.3"}
server_ciphers=${ZWE_configs_zowe_network_server_tls_ciphers:-${ZWE_components_gateway_zowe_network_server_tls_ciphers:-${ZWE_zowe_network_server_tls_ciphers:-TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384}}}
get_enabled_protocol "client"
client_enabled_protocols=${ZWE_components_gateway_apiml_httpclient_ssl_enabled_protocols:-${result:-${server_enabled_protocols}}}
client_ciphers=${ZWE_configs_zowe_network_client_tls_ciphers:-${ZWE_components_gateway_zowe_network_client_tls_ciphers:-${ZWE_zowe_network_client_tls_ciphers:-${server_ciphers}}}}

keystore_type="${ZWE_configs_certificate_keystore_type:-${ZWE_zowe_certificate_keystore_type:-PKCS12}}"
keystore_pass="${ZWE_configs_certificate_keystore_password:-${ZWE_zowe_certificate_keystore_password}}"
key_alias="${ZWE_configs_certificate_keystore_alias:-${ZWE_zowe_certificate_keystore_alias}}"
Expand Down Expand Up @@ -198,7 +243,7 @@ _BPX_JOBNAME=${ZWE_zowe_job_prefix}${DISCOVERY_CODE} ${JAVA_BIN_DIR}java \
-Djava.io.tmpdir=${TMPDIR:-/tmp} \
-Dspring.profiles.active=${ZWE_configs_spring_profiles_active:-https} \
-Dspring.profiles.include=$LOG_LEVEL \
-Dserver.address=0.0.0.0 \
-Dserver.address=${ZWE_configs_zowe_network_server_listenAddresses_0:-${ZWE_zowe_network_server_listenAddresses_0:-"0.0.0.0"}} \
-Dapiml.discovery.userid=eureka \
-Dapiml.discovery.password=password \
-Dapiml.discovery.allPeersUrls=${ZWE_DISCOVERY_SERVICES_LIST} \
Expand All @@ -211,9 +256,12 @@ _BPX_JOBNAME=${ZWE_zowe_job_prefix}${DISCOVERY_CODE} ${JAVA_BIN_DIR}java \
-Dapiml.security.ssl.verifySslCertificatesOfServices=${verifySslCertificatesOfServices:-false} \
-Dapiml.security.ssl.nonStrictVerifySslCertificatesOfServices=${nonStrictVerifySslCertificatesOfServices:-false} \
-Dapiml.security.auth.cookieProperties.cookieName=${cookieName:-apimlAuthenticationToken} \
-Dapiml.httpclient.ssl.enabled-protocols=${ZWE_components_gateway_apiml_httpclient_ssl_enabled_protocols:-"TLSv1.2"} \
-Dserver.ssl.enabled=${ZWE_configs_server_ssl_enabled:-true} \
-Dserver.ssl.protocol=${ZWE_configs_server_ssl_protocol:-"TLSv1.2"} \
-Dapiml.httpclient.ssl.enabled-protocols=${client_enabled_protocols} \
-Djdk.tls.client.cipherSuites=${client_ciphers} \
-Dserver.ssl.ciphers=${server_ciphers} \
-Dserver.ssl.protocol=${server_protocol} \
-Dserver.ssl.enabled-protocols=${server_enabled_protocols} \
-Dserver.ssl.keyStore="${keystore_location}" \
-Dserver.ssl.keyStoreType="${keystore_type}" \
-Dserver.ssl.keyStorePassword="${keystore_pass}" \
Expand Down
50 changes: 49 additions & 1 deletion gateway-package/src/main/resources/bin/start.sh
View file
Original file line number Diff line number Diff line change
Expand Up @@ -176,6 +176,49 @@ ADD_OPENS="--add-opens=java.base/java.lang=ALL-UNNAMED
--add-opens=java.base/sun.nio.ch=ALL-UNNAMED
--add-opens=java.base/java.io=ALL-UNNAMED"

get_enabled_protocol_limit() {
target=$1
type=$2
key_component="ZWE_configs_zowe_network_${target}_tls_${type}Tls"
value_component=$(eval echo \$$key_component)
key_zowe="ZWE_zowe_network_${target}_tls_${type}Tls"
value_zowe=$(eval echo \$$key_zowe)
enabled_protocol_limit=${value_component:-${value_zowe:-}}
}

extract_between() {
echo "$1" | sed -e "s/.*$2,//" -e "s/$3.*//"
}

get_enabled_protocol() {
target=$1
get_enabled_protocol_limit "${target}" "min"
enabled_protocols_min=${enabled_protocol_limit}
get_enabled_protocol_limit "${target}" "max"
enabled_protocols_max=${enabled_protocol_limit}

if [ "${enabled_protocols_min:-}" = "${enabled_protocols_max:-}" ]; then
result="${enabled_protocols_max:-}"
elif [ -z "${enabled_protocols_min:-}" ]; then
result="${enabled_protocols_max:-}"
else
enabled_protocols_max=${enabled_protocols_max:-"TLSv1.3"}
enabled_protocols=,TLSv1,TLSv1.1,TLSv1.2,TLSv1.3,TLSv1.4,
# Extract protocols between min and max (inclusive)
result=$(extract_between "$enabled_protocols" "$enabled_protocols_min" "$enabled_protocols_max")
result="$enabled_protocols_min,$result$enabled_protocols_max"
fi
}

get_enabled_protocol_limit "server" "max"
server_protocol=${enabled_protocol_limit:-"TLS"}
get_enabled_protocol "server"
server_enabled_protocols=${result:-"TLSv1.3"}
server_ciphers=${ZWE_configs_zowe_network_server_tls_ciphers:-${ZWE_components_gateway_zowe_network_server_tls_ciphers:-${ZWE_zowe_network_server_tls_ciphers:-TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384}}}
get_enabled_protocol "client"
client_enabled_protocols=${ZWE_configs_apiml_httpclient_ssl_enabled_protocols:-${result:-${server_enabled_protocols}}}
client_ciphers=${ZWE_configs_zowe_network_client_tls_ciphers:-${ZWE_components_gateway_zowe_network_client_tls_ciphers:-${ZWE_zowe_network_client_tls_ciphers:-${server_ciphers}}}}

keystore_type="${ZWE_configs_certificate_keystore_type:-${ZWE_zowe_certificate_keystore_type:-PKCS12}}"
keystore_pass="${ZWE_configs_certificate_keystore_password:-${ZWE_zowe_certificate_keystore_password}}"
key_alias="${ZWE_configs_certificate_keystore_alias:-${ZWE_zowe_certificate_keystore_alias}}"
Expand Down Expand Up @@ -252,7 +295,7 @@ _BPX_JOBNAME=${ZWE_zowe_job_prefix}${GATEWAY_CODE} ${JAVA_BIN_DIR}java \
-Dapiml.gateway.maxSimultaneousRequests=${ZWE_configs_gateway_registry_maxSimultaneousRequests:-20} \
-Dapiml.gateway.registry.metadata-key-allow-list=${ZWE_configs_gateway_registry_metadataKeyAllowList:-} \
-Dapiml.gateway.refresh-interval-ms=${ZWE_configs_gateway_registry_refreshIntervalMs:-30000} \
-Dserver.address=0.0.0.0 \
-Dserver.address=${ZWE_configs_zowe_network_server_listenAddresses_0:-${ZWE_zowe_network_server_listenAddresses_0:-"0.0.0.0"}} \
-Deureka.client.serviceUrl.defaultZone=${ZWE_DISCOVERY_SERVICES_LIST} \
-Dserver.maxConnectionsPerRoute=${ZWE_configs_server_maxConnectionsPerRoute:-100} \
-Dserver.maxTotalConnections=${ZWE_configs_server_maxTotalConnections:-1000} \
Expand All @@ -269,6 +312,11 @@ _BPX_JOBNAME=${ZWE_zowe_job_prefix}${GATEWAY_CODE} ${JAVA_BIN_DIR}java \
-Dserver.ssl.trustStore="${truststore_location}" \
-Dserver.ssl.trustStoreType="${truststore_type}" \
-Dserver.ssl.trustStorePassword="${truststore_pass}" \
-Dserver.ssl.ciphers=${server_ciphers} \
-Dserver.ssl.protocol=${server_protocol} \
-Dserver.ssl.enabled-protocols=${server_enabled_protocols} \
-Dapiml.httpclient.ssl.enabled-protocols=${client_enabled_protocols} \
-Djdk.tls.client.cipherSuites=${client_ciphers} \
-Djava.protocol.handler.pkgs=com.ibm.crypto.provider \
-Djavax.net.debug=${ZWE_configs_sslDebug:-""} \
-Djava.library.path=${LIBPATH} \
Expand Down
Loading

0 comments on commit aef67a3

Please sign in to comment.