You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by jo...@apache.org on 2007/12/18 09:17:37 UTC

svn commit: r605129 - /ofbiz/trunk/framework/base/config/ofbiz-containers.xml

Author: jonesde
Date: Tue Dec 18 00:17:36 2007
New Revision: 605129

URL: http://svn.apache.org/viewvc?rev=605129&view=rev
Log:
Based on new comments in an old issue (OFBIZ-1116) setting this to false and commenting about want; I meant to do this a few months agoout want; I meant to do this a few months ago but obviously never got around to it

Modified:
    ofbiz/trunk/framework/base/config/ofbiz-containers.xml

Modified: ofbiz/trunk/framework/base/config/ofbiz-containers.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/framework/base/config/ofbiz-containers.xml?rev=605129&r1=605128&r2=605129&view=diff
==============================================================================
--- ofbiz/trunk/framework/base/config/ofbiz-containers.xml (original)
+++ ofbiz/trunk/framework/base/config/ofbiz-containers.xml Tue Dec 18 00:17:36 2007
@@ -234,7 +234,11 @@
             <!-- SSL connector attributes -->            
             <property name="sSLImplementation" value="org.ofbiz.catalina.container.SSLImpl"/>
             <property name="algorithm" value="SunX509"/>
-            <property name="clientAuth" value="want"/>
+            <!-- the clientAuth to "want" in order to receive certs from the client; 
+                note that this isn't set this way by default because with certain browsers 
+                (like Safari) it breaks access via HTTPS, so until that problem is fixed
+                the default will be false -->
+            <property name="clientAuth" value="false"/>
             <property name="keystoreFile" value="framework/base/config/ofbizssl.jks"/>
             <property name="keystorePass" value="changeit"/>
             <property name="keystoreType" value="JKS"/>