Alon Bar-Lev has uploaded a new change for review.
Change subject: packaging: redirect to TLS/SSL using application server
......................................................................
packaging: redirect to TLS/SSL using application server
The following applications are effected:
* ovirtengineweb
* restapi
* userportal
* webadmin
Changes
1. Introduce system propery OVIRT_APPS_TRANSPORT_GUARANTEE which
effects the transport-guarantee at web.xml.
2. Remove the gussing and setup of the root welcome message
(/etc/ovirt-engine/web-conf.js), as now each context redirect
uppon need.
3. Add ENGINE_APPS_FORCE_SECURE to engine-service configuration
file to control behavior.
JBOSS 7.1.1 NOTE
JBOSS 7.1.1 does not support system properties substitutions within
web.xml, this feature will be available at 7.1.2[1].
As a termporary solution the CONFIDENTIAL setting will be injected
during rpm build as constant. In future it will be possible to modify
web.xml to the following dynamic statement to enable the control via the
configuration file:
<security-constraint>
<web-resource-collection>
<web-resource-name>Protected Context</web-resource-name>
<description>Protected Context</description>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>${OVIRT_APPS_TRANSPORT_GUARANTEE:NONE}</transport-guarantee>
</user-data-constraint>
</security-constraint>
[1] https://issues.jboss.org/browse/AS7-4479
Change-Id: If0d05ce7224548123c9f5f2a1ce09bf090625085
Signed-off-by: Alon Bar-Lev <[email protected]>
---
M Makefile
M backend/manager/modules/restapi/webapp/src/main/webapp/WEB-INF/web.xml
D
backend/manager/modules/root/src/main/java/org/ovirt/engine/core/WebConfServlet.java
M backend/manager/modules/root/src/main/webapp/WEB-INF/web.xml
M backend/manager/modules/root/src/main/webapp/index.html
M frontend/wars/rmw-war/src/main/webapp/WEB-INF/web.xml
M frontend/webadmin/modules/userportal-gwtp/src/main/webapp/WEB-INF/web.xml
M frontend/webadmin/modules/webadmin/src/main/webapp/WEB-INF/web.xml
M packaging/fedora/engine-service.py
M packaging/fedora/engine-service.sysconfig
M packaging/fedora/setup/basedefs.py
M packaging/fedora/setup/common_utils.py
M packaging/fedora/setup/engine-setup.py
M packaging/fedora/setup/ovirt_port80.py
D packaging/fedora/setup/resources/jboss/web-conf.js
M packaging/fedora/spec/ovirt-engine.spec.in
16 files changed, 66 insertions(+), 183 deletions(-)
git pull ssh://gerrit.ovirt.org:29418/ovirt-engine refs/changes/27/6827/1
--
To view, visit http://gerrit.ovirt.org/6827
To unsubscribe, visit http://gerrit.ovirt.org/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: If0d05ce7224548123c9f5f2a1ce09bf090625085
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Alon Bar-Lev <[email protected]>
_______________________________________________
Engine-patches mailing list
[email protected]
http://lists.ovirt.org/mailman/listinfo/engine-patches
