{"type":"doc","content":[{"type":"paragraph","content":[{"text":"Den här dokumentationen innehåller procedur för att installera, underhålla och administrera SSL-certifikat som möjliggör säker kommunikation via https-protokollet mellan Weave och slutanvändare.","type":"text"}]},{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"toc","parameters":{"macroParams":{"minLevel":{"value":"1"},"maxLevel":{"value":"6"},"outline":{"value":"false"},"style":{"value":"default"},"type":{"value":"list"},"printable":{"value":"true"}},"macroMetadata":{"macroId":{"value":"04e1cfd8-127e-4ca6-8f99-a2987c5fee99"},"schemaVersion":{"value":"1"},"title":"Table of Contents"}},"localId":"0794705d-79cc-49c0-8947-04418a9c3f2a"}},{"type":"heading","attrs":{"level":1},"content":[{"text":"Installera certifikat","type":"text"}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"För att förenkla processen att lägga till nytt certifikat använder vi verktyget ","type":"text"},{"text":"Portecle ","type":"text","marks":[{"type":"link","attrs":{"href":"https://portecle.sourceforge.net/"}}]},{"text":"som kan hantera flera typer av certifikat och ajourföring av nyckelförråd. Den finns tillgänglig NKO-P-IKART01 under D:\\program\\portecle-1.11.","type":"text"}]},{"type":"paragraph","content":[{"text":"Portacle är ett Java-baserat program och startas genom kommandot: ","type":"text"}]},{"type":"paragraph","content":[{"text":"..\\jre1.8.0_251\\bin\\java.exe -jar portecle.jar","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"Där vi förutsätter att vi kör kommandot från D:\\program\\portecle-1.11","type":"text"}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Nyckelförråd","type":"text"}]},{"type":"paragraph","content":[{"text":"Ett Nyckelförråd (Keystore) används av plattformen för att på ett säkert sätt spara privata nycklar, certifikat och symmetriska nycklar. I kontexten förmedlas säker kommunikation via SSL/TLS med det installerade certifikatet som garant att vi är den vi utger oss att vara. I detta fall ","type":"text"},{"text":"interngis.nacka.se","type":"text","marks":[{"type":"code"}]},{"text":". Certifikatet är i regel giltigt under 12 månader i taget.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Skapa nytt nyckelförråd","type":"text"}]},{"type":"paragraph","content":[{"text":"Om inget nyckelförråd finns tillgänglig sedan tidigare kan ett nytt skapas. Befintligt nyckelförråd ska finnas på följande sökväg: ","type":"text"},{"text":"D:\\program\\weave_2.6\\jetty_base\\etc\\jetty.jks","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"Om nyckelförrådet redan existerar, fortsätt till ","type":"text"},{"text":"Lägga till nytt certifikat","type":"text","marks":[{"type":"link","attrs":{"href":"#L%C3%A4gga-till-certifikat"}}]}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Öppna Portecle och välj File -> “New Keystore…”","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":352,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":352,"alt":"image-20240828-092709.png","id":"f96ae07c-98d3-44f2-80ba-3e661788b52c","collection":"contentId-3346825217","type":"file","height":173},"marks":[{"type":"border","attrs":{"size":1,"color":"#758195"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Välj “JKS” som format.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Välj File -> “Save Keystore As…”","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Skriv in lösenord som ska gälla för nyckelförrådet och välj OK. ","type":"text"},{"text":"Spara lösenordet","type":"text","marks":[{"type":"strong"}]},{"text":", det kommer användas i konfigurationen för SSL.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Spara lösenordet i katalogen ","type":"text"},{"text":"D:\\program\\weave_2.6\\jetty_base\\etc\\","type":"text","marks":[{"type":"code"}]},{"text":" och med namnet ","type":"text"},{"text":"jetty.jks","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Lägga till certifikat","type":"text"}]},{"type":"paragraph","content":[{"text":"Att lägga till ett nytt certifikat sker i två steg. Dels en konvertering av formatet (.pfx) av certifikatet till ett format som kan importeras i nyckelförrådet samt importen av certifikatet.","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Konvertera certifikatet","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Öppna Portecle och välj File -> “Open Keystore file…”","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":344,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":344,"alt":"image-20240828-092558.png","id":"d6e7cb70-4dac-483b-8ede-355c700dced7","collection":"contentId-3346825217","type":"file","height":128},"marks":[{"type":"border","attrs":{"size":1,"color":"#758195"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Navigera till katalogen där certifikatet (exempelvis ","type":"text"},{"text":"star_nacka_se_2024-2025_w_certchain.pfx","type":"text","marks":[{"type":"code"}]},{"text":") finns och öppna det.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Fyll i eventuellt lösenord för certifikatet och välj OK. När certifikatet öppnats ska det finnas en rad.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Högerklicka på raden och välj “export”","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":348,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":348,"alt":"image-20240828-093059.png","id":"02287e4b-b5b4-4b81-b19c-5a7239dd2fcd","collection":"contentId-3346825217","type":"file","height":291},"marks":[{"type":"border","attrs":{"size":1,"color":"#758195"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Välj “Private Key and Certificate“ som Export Type och “PKCS#12“ som Export Format.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":272,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":272,"alt":"image-20240828-093252.png","id":"fbede78e-e98c-46ea-b24d-2aeea4a697bd","collection":"contentId-3346825217","type":"file","height":381}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Fyll i eventuellt lösenord för certifikatet på nytt och välj OK.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Välj nytt lösenord och bekräfta det för certifikatet som ska exporteras och välj OK. ","type":"text"},{"text":"Spara lösenordet","type":"text","marks":[{"type":"strong"}]},{"text":", det används vid importen av certifikatet.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Spara certifikatet, exempelvis ","type":"text"},{"text":"nacka_se_Thawte_TLS_RSA_CA_G.p12","type":"text","marks":[{"type":"code"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Exporten är klar","type":"text"}]}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Importera certifikat","type":"text"}]},{"type":"paragraph","content":[{"text":"När certifikatet har konverterats kan vi importera det i vårt nyckelförråd.","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"För att inte riskera att nuvarande nyckelförråd, ","type":"text"},{"text":"jetty.jks","type":"text","marks":[{"type":"code"}]},{"text":", blir förvanskad av oförutsedd händelse, rekommenderas backup av filen innan ändring.","type":"text"}]}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Öppna Portecle och välj File -> “Open Keystore file…”. Öppna befintligt nyckelförråd, ","type":"text"},{"text":"D:\\program\\weave_2.6\\jetty_base\\etc\\jetty.jks","type":"text","marks":[{"type":"code"}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Skriv in lösenord för nyckelförrådet (som angavs i punkt 4 under ","type":"text"},{"text":"Skapa nytt nyckelförråd","type":"text","marks":[{"type":"link","attrs":{"href":"#Skapa-nytt-nyckelf%C3%B6rr%C3%A5d"}}]},{"text":")","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Om ett tidigare certifikat existerar i nyckelförrådet ska det tas bort innan import.","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Markera certifikatet i Portecle och högerklicka på det. ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Välj “Delete“ och bekräfta.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Det gamla certifikatet har tagits bort.","type":"text"}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Välj Tools -> “Import Key Pair…“","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":350,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":350,"alt":"image-20240828-094522.png","id":"53d999cb-fbea-4ded-9503-1da8e34b1864","collection":"contentId-3346825217","type":"file","height":203},"marks":[{"type":"border","attrs":{"size":1,"color":"#758195"}}]}]},{"type":"paragraph","content":[{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Välj det konverterade certifikatet (som angavs i punkt 8 i ","type":"text"},{"text":"Konvertera certifikatet","type":"text","marks":[{"type":"link","attrs":{"href":"#Konvertera-certifikatet"}}]},{"text":") och ange lösenordet (punkt 7 i ","type":"text"},{"text":"Konvertera certifikatet","type":"text","marks":[{"type":"link","attrs":{"href":"#Konvertera-certifikatet"}}]},{"text":").","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Välj OK när dialogrutan öppnas.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":450,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":450,"alt":"image-20240828-095012.png","id":"6ed99f56-b68c-4021-aeda-0c5cfe285eb0","collection":"contentId-3346825217","type":"file","height":312}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Välj en lämplig alias för lättare igenkänning.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":317,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":317,"alt":"image-20240828-095318.png","id":"60058bc4-86eb-434e-90f9-0a293ee92e7a","collection":"contentId-3346825217","type":"file","height":159}}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Välj nytt lösenord och bekräfta det för certifikatet som importerats och välj OK. ","type":"text"},{"text":"Spara lösenordet","type":"text","marks":[{"type":"strong"}]},{"text":", det används vid konfigurationen av SSL i Weave.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Välj File -> “Save Keystore” för att spara nyckelförrådet.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Det nya certifikatet har lagts till och nyckelförrådet uppdaterats. Weave måste startas om för att förändringen ska börja gälla.","type":"text"}]}]}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"Notera att om lösenorden ändrats","type":"text","marks":[{"type":"strong"}]},{"text":" för nyckelförrådet eller certifikatet måste korresponderande lösenord i ","type":"text"},{"text":"ssl.ini","type":"text","marks":[{"type":"link","attrs":{"href":"#ssl.ini"}}]},{"text":" uppdateras.","type":"text"}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Konfigurera SSL i Weave","type":"text"}]},{"type":"paragraph","content":[{"text":"SSL-konfigurationen för Weave hanteras under katalogen ","type":"text"},{"text":"D:\\program\\weave_2.6\\jetty_base","type":"text","marks":[{"type":"code"}]},{"text":". Konfiguraionen sker i följande filer:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"etc/jetty.xml","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"start.d/https.ini","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"start.d/ssl.ini","type":"text"}]}]}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"Exempel på ovan filer finns i slutet av dokumentet","type":"text"}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"jetty.xml","type":"text"}]},{"type":"paragraph","content":[{"text":"Filen finns från början och behöver enbart ändras vid initial uppsättning av SSL/TLS. Det är i huvudsak två delar som ändras:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Specificera ","type":"text"},{"text":"securePort","type":"text","marks":[{"type":"code"}]},{"text":" under ","type":"text"},{"text":"httpConfig","type":"text","marks":[{"type":"code"}]},{"text":" som bestämmer vilken port som https ska publiceras på. Standard för https är 443.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Lägga till ","type":"text"},{"text":"SecuredRedirectHandler","type":"text","marks":[{"type":"code"}]},{"text":" som per automatik omdirigerar http-trafik till https. ","type":"text"},{"text":"http://interngis.nacka.se","type":"text","marks":[{"type":"code"}]},{"text":" blir ","type":"text"},{"text":"https://interngis.nacka.se","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"https.ini","type":"text"}]},{"type":"paragraph","content":[{"text":"Aktiverar modulen för https","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"ssl.ini","type":"text"}]},{"type":"paragraph","content":[{"text":"Huvudsaklig konfiguration av SSL och koppling till certifikat. De huvudsakliga konfigurationsobjekten är:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"jetty.ssl.port","type":"text","marks":[{"type":"code"}]},{"text":" refererar till vilken port som https ska publiceras på. ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"jetty.sslContext.keyStorePath","type":"text","marks":[{"type":"code"}]},{"text":" och ","type":"text"},{"text":"jetty.sslContext.trustStorePath","type":"text","marks":[{"type":"code"}]},{"text":" hänvisar till key- och truststore (jetty.jks) där certifikatet är placerat, relativt katalogen ","type":"text"},{"text":"jetty_base","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"För ","type":"text"},{"text":"jetty.sslContext.keyStorePassword","type":"text","marks":[{"type":"code"}]},{"text":", ","type":"text"},{"text":"jetty.sslContext.keyManagerPassword","type":"text","marks":[{"type":"code"}]},{"text":", ","type":"text"},{"text":"jetty.sslContext.trustStorePassword","type":"text","marks":[{"type":"code"}]},{"text":" fylls lösenord i för åtkomst till key- och truststore och certifikat.","type":"text"}]}]}]},{"type":"panel","attrs":{"panelType":"note"},"content":[{"type":"paragraph","content":[{"text":"Notera att lösenord för key store och trust store kan sättas med obfuscation (OBF).","type":"text"}]},{"type":"paragraph","content":[{"text":"För att konvertera lösenord till OBF kan följande kommando köras från ","type":"text"},{"text":"D:\\program\\weave_2.6\\jetty\\lib\\","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"..\\..\\jre\\bin\\java.exe -cp jetty-util-9.4.38.v20210224.jar org.eclipse.jetty.util.security.Password ","type":"text","marks":[{"type":"code"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Exempel ","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"jetty.xml","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"Konfigurerad med ","type":"text"},{"text":"securePort","type":"text","marks":[{"type":"code"}]},{"text":" 443 samt omdirigering av http-trafik till https.","type":"text"}]},{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n\n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n \n\n\n","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"https.ini","type":"text"}]},{"type":"paragraph","content":[{"text":"Aktivering av https-modul","type":"text"}]},{"type":"codeBlock","content":[{"text":"# --------------------------------------- \n# Module: https\n# Settings located in jetty_base/start.d/https.ini\n# --------------------------------------- \n--module=https\n","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":" ssl.ini","type":"text"}]},{"type":"paragraph","content":[{"text":"Konfiguration för SSL på port 443 samt hänvisning till nyckförråd ","type":"text"},{"text":"etc/jetty.jks","type":"text","marks":[{"type":"code"}]}]},{"type":"codeBlock","content":[{"text":"### TLS(SSL) Connector Configuration\n\n# --------------------------------------- \n# Module: ssl\n# Settings located in jetty_base/start.d/ssl.ini\n# --------------------------------------- \n--module=ssl\n\n## Connector host/address to bind to\n# jetty.ssl.host=0.0.0.0\n\n## Connector port to listen on\njetty.ssl.port=443\n\n## Connector idle timeout in milliseconds\n# jetty.ssl.idleTimeout=30000\n\n## Number of acceptors (-1 picks default based on number of cores)\n# jetty.ssl.acceptors=-1\n\n## Number of selectors (-1 picks default based on number of cores)\n# jetty.ssl.selectors=-1\n\n## ServerSocketChannel backlog (0 picks platform default)\n# jetty.ssl.acceptQueueSize=0\n\n## Thread priority delta to give to acceptor threads\n# jetty.ssl.acceptorPriorityDelta=0\n\n## The requested maximum length of the queue of incoming connections.\n# jetty.ssl.acceptQueueSize=0\n\n## Enable/disable the SO_REUSEADDR socket option.\n# jetty.ssl.reuseAddress=true\n\n## Enable/disable TCP_NODELAY on accepted sockets.\n# jetty.ssl.acceptedTcpNoDelay=true\n\n## The SO_RCVBUF option to set on accepted sockets. A value of -1 indicates that it is left to its default value.\n# jetty.ssl.acceptedReceiveBufferSize=-1\n\n## The SO_SNDBUF option to set on accepted sockets. A value of -1 indicates that it is left to its default value.\n# jetty.ssl.acceptedSendBufferSize=-1\n\n## Connect Timeout in milliseconds\n# jetty.ssl.connectTimeout=15000\n\n## Whether SNI is required for all secure connections. Rejections are in TLS handshakes.\n# jetty.sslContext.sniRequired=false\n\n## Whether SNI is required for all secure connections. Rejections are in HTTP 400 response.\n# jetty.ssl.sniRequired=false\n\n## Whether request host names are checked to match any SNI names\n# jetty.ssl.sniHostCheck=true\n\n## max age in seconds for a Strict-Transport-Security response header (default -1)\n# jetty.ssl.stsMaxAgeSeconds=31536000\n\n## include subdomain property in any Strict-Transport-Security header (default false)\n# jetty.ssl.stsIncludeSubdomains=true\n\n### SslContextFactory Configuration\n## Note that OBF passwords are not secure, just protected from casual observation\n## See http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html\n\n## The Endpoint Identification Algorithm\n## Same as javax.net.ssl.SSLParameters#setEndpointIdentificationAlgorithm(String)\n#jetty.sslContext.endpointIdentificationAlgorithm=\n\n## SSL JSSE Provider\n# jetty.sslContext.provider=\n\n## Keystore file path (relative to $jetty.base)\njetty.sslContext.keyStorePath=etc/jetty.jks\n\n## Truststore file path (relative to $jetty.base)\njetty.sslContext.trustStorePath=etc/jetty.jks\n\n## Keystore password\njetty.sslContext.keyStorePassword=OBF:1ytaU12luU0wh11vgfU0k2sU0mo31ytc\n\n## Keystore type and provider\n# jetty.sslContext.keyStoreType=JKS\n# jetty.sslContext.keyStoreProvider=\n\n## KeyManager password\njetty.sslContext.keyManagerPassword=OBF:1ytaU12luU0wh11vgfU0k2sU0mo31ytc\n\n## Truststore password\njetty.sslContext.trustStorePassword=OBF:1ytaU12luU0wh11vgfU0k2sU0mo31ytc\n\n## Truststore type and provider\n# jetty.sslContext.trustStoreType=JKS\n# jetty.sslContext.trustStoreProvider=\n\n## whether client certificate authentication is required\n# jetty.sslContext.needClientAuth=false\n\n## Whether client certificate authentication is desired\n# jetty.sslContext.wantClientAuth=false\n\n## Whether cipher order is significant (since java 8 only)\n# jetty.sslContext.useCipherSuitesOrder=true\n\n## To configure Includes / Excludes for Cipher Suites or Protocols see tweak-ssl.xml example at\n## https://www.eclipse.org/jetty/documentation/current/configuring-ssl.html#configuring-sslcontextfactory-cipherSuites\n\n## Set the size of the SslSession cache\n# jetty.sslContext.sslSessionCacheSize=-1\n\n## Set the timeout (in seconds) of the SslSession cache timeout\n# jetty.sslContext.sslSessionTimeout=-1\n\n## Allow SSL renegotiation\n# jetty.sslContext.renegotiationAllowed=true\n# jetty.sslContext.renegotiationLimit=5\n","type":"text"}]},{"type":"paragraph"},{"type":"paragraph"}],"version":1}

Browser not supported