diff options
| author | Arnstein Ressem <aressem@yahooinc.com> | 2022-04-08 14:23:35 +0200 |
|---|---|---|
| committer | Arnstein Ressem <aressem@yahooinc.com> | 2022-04-08 14:23:35 +0200 |
| commit | 2e20bead9f53bc18d0946d77a0715b0ad2cfc28d (patch) | |
| tree | 5f1c5465a7aec923beeafcba39769fd76cdbb501 /container-disc | |
| parent | 13ea650dc641f7aad7923bf3dc6377e1884c9063 (diff) | |
Add recommended java.security options.
Diffstat (limited to 'container-disc')
| -rwxr-xr-x | container-disc/src/main/sh/vespa-start-container-daemon.sh | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/container-disc/src/main/sh/vespa-start-container-daemon.sh b/container-disc/src/main/sh/vespa-start-container-daemon.sh index a6c2c5999a8..19d54b2cfea 100755 --- a/container-disc/src/main/sh/vespa-start-container-daemon.sh +++ b/container-disc/src/main/sh/vespa-start-container-daemon.sh @@ -285,6 +285,7 @@ exec $numactlcmd $envcmd java \ --add-opens=java.base/sun.security.ssl=ALL-UNNAMED \ -Djava.io.tmpdir="${VESPA_HOME}/tmp" \ -Djava.library.path="${VESPA_HOME}/lib64" \ + -Djava.security.properties=${VESPA_HOME}/conf/vespa/java.security.override \ -Djava.awt.headless=true \ -Djavax.net.ssl.keyStoreType=JKS \ -Djdk.tls.rejectClientInitiatedRenegotiation=true \ |