78 lines
3.3 KiB
Properties
Executable File
78 lines
3.3 KiB
Properties
Executable File
#
|
|
# Copyright © 2005 - 2018 TIBCO Software Inc.
|
|
# http://www.jaspersoft.com.
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU Affero General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU Affero General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
# along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
#
|
|
|
|
#########################################################
|
|
# Jaspersoft Security Configuration
|
|
#########################################################
|
|
|
|
# Turns request parameter validation on or off.
|
|
security.validation.input.on=false
|
|
# Turns sql validation on or off.
|
|
security.validation.sql.on=true
|
|
|
|
# RegExp to remove comments from SQL before validation. Removal of the
|
|
# comments before validation simplifies validSQL expression in
|
|
# validation.properties. This property is optional. If not specified, no
|
|
# comments would be removed from SQL queries: validSQL expression would have
|
|
# to account for possible comments in the query.
|
|
security.validation.sql.comments.regexp=(?:/\\*.*?\\*/)|(?:--.*?$)|(?:\\#.*?$)
|
|
|
|
# Turns encryption of encryption.param's defined below on or off.
|
|
encryption.on=false
|
|
|
|
# ENCRYPTION CONFIGURATION
|
|
# encryption.dynamic.key=true means that the 1 key will be generated per every single request.
|
|
# If 'false', the key will be drawn from a keystore (see KEYSTORE group below)
|
|
encryption.dynamic.key=true
|
|
|
|
# ENCRYPTION KEY GENERATION PARAMS
|
|
# RSA is the only encryption algorithm implemented so far
|
|
encryption.type=RSA
|
|
encryption.key.length=1024
|
|
|
|
|
|
# ENCRYPTED PARAMETERS
|
|
# In order for parameters to be encrypted, their property name should start with 'encryption.param.'
|
|
# The general convention for param name is encryption.param.[application area].
|
|
encryption.param.login=j_password
|
|
encryption.param.login.changePassword1=j_newpassword1
|
|
encryption.param.login.changePassword2=j_newpassword2
|
|
encryption.param.user.mgmt=entity.password
|
|
|
|
# KEYSTORE
|
|
# The following properties are used only when encryption.dynamic.key=false and encryption.on=true
|
|
# These properties configure the keystore housing the private-public encryption key pair.
|
|
#
|
|
# If you wish to generate your own keystore file with your own password, use 'keytool'
|
|
# java utility (Reference: http://docs.oracle.com/javase/6/docs/technotes/tools/windows/keytool.html).
|
|
# 'keytool' is the master tool for keystore management. It comes with jre/jdk (bin dir.).
|
|
#
|
|
# keystore.location can be on a classpath or an external-to-webapp file
|
|
keystore.location=keystore.jks
|
|
# password to verify keystore integrity
|
|
keystore.password=jasper123
|
|
# key pair alias used to retrieve correct key from keystore
|
|
keystore.key.alias=jasper
|
|
# keystore.key.alias's password
|
|
keystore.key.password=jasper321
|
|
|
|
# Logging message configuration in SecurityConfiguration class
|
|
log.msg.security.off=SECURITY for [%s] is OFF
|
|
msg.no.rule=No rule for parameter [%s]. Using default validation on input=[%s].
|
|
msg.cannot.load=Security configuration [%s] cannot be loaded.
|