From f752ae285c34841561b94238e915a085c9ebdd00 Mon Sep 17 00:00:00 2001 From: Arnstein Ressem Date: Fri, 8 Apr 2022 21:01:30 +0200 Subject: Revert "Revert "Add recommended java.security options."" --- container-disc/src/main/sh/vespa-start-container-daemon.sh | 1 + 1 file changed, 1 insertion(+) (limited to 'container-disc/src') diff --git a/container-disc/src/main/sh/vespa-start-container-daemon.sh b/container-disc/src/main/sh/vespa-start-container-daemon.sh index a6c2c5999a8..19d54b2cfea 100755 --- a/container-disc/src/main/sh/vespa-start-container-daemon.sh +++ b/container-disc/src/main/sh/vespa-start-container-daemon.sh @@ -285,6 +285,7 @@ exec $numactlcmd $envcmd java \ --add-opens=java.base/sun.security.ssl=ALL-UNNAMED \ -Djava.io.tmpdir="${VESPA_HOME}/tmp" \ -Djava.library.path="${VESPA_HOME}/lib64" \ + -Djava.security.properties=${VESPA_HOME}/conf/vespa/java.security.override \ -Djava.awt.headless=true \ -Djavax.net.ssl.keyStoreType=JKS \ -Djdk.tls.rejectClientInitiatedRenegotiation=true \ -- cgit v1.2.3