src/java.base/share/conf/net.properties
author michaelm
Fri, 05 Oct 2018 08:54:10 +0100
changeset 53328 dff86e25073f
parent 52725 c470f977ade8
permissions -rw-r--r--
8209094: Improve web server connections Reviewed-by: chegar, dfuchs, mschoene, igerasim
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
     1
############################################################
53328
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
     2
#       Default Networking Configuration File
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
     3
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
     4
# This file may contain default values for the networking system properties.
90ce3da70b43 Initial load
duke
parents:
diff changeset
     5
# These values are only used when the system properties are not specified
43998
d40cc68d31b4 8175305: Typos in net.properties
prappo
parents: 41579
diff changeset
     6
# on the command line or set programmatically.
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
     7
# For now, only the various proxy settings can be configured here.
90ce3da70b43 Initial load
duke
parents:
diff changeset
     8
############################################################
90ce3da70b43 Initial load
duke
parents:
diff changeset
     9
90ce3da70b43 Initial load
duke
parents:
diff changeset
    10
# Whether or not the DefaultProxySelector will default to System Proxy
90ce3da70b43 Initial load
duke
parents:
diff changeset
    11
# settings when they do exist.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    12
# Set it to 'true' to enable this feature and check for platform
90ce3da70b43 Initial load
duke
parents:
diff changeset
    13
# specific proxy settings
43998
d40cc68d31b4 8175305: Typos in net.properties
prappo
parents: 41579
diff changeset
    14
# Note that the system properties that do explicitly set proxies
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    15
# (like http.proxyHost) do take precedence over the system settings
90ce3da70b43 Initial load
duke
parents:
diff changeset
    16
# even if java.net.useSystemProxies is set to true.
52725
c470f977ade8 8214014: Remove vestiges of gopher: protocol proxy support
rriggs
parents: 52554
diff changeset
    17
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    18
java.net.useSystemProxies=false
90ce3da70b43 Initial load
duke
parents:
diff changeset
    19
90ce3da70b43 Initial load
duke
parents:
diff changeset
    20
#------------------------------------------------------------------------
90ce3da70b43 Initial load
duke
parents:
diff changeset
    21
# Proxy configuration for the various protocol handlers.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    22
# DO NOT uncomment these lines if you have set java.net.useSystemProxies
90ce3da70b43 Initial load
duke
parents:
diff changeset
    23
# to true as the protocol specific properties will take precedence over
90ce3da70b43 Initial load
duke
parents:
diff changeset
    24
# system settings.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    25
#------------------------------------------------------------------------
90ce3da70b43 Initial load
duke
parents:
diff changeset
    26
90ce3da70b43 Initial load
duke
parents:
diff changeset
    27
# HTTP Proxy settings. proxyHost is the name of the proxy server
90ce3da70b43 Initial load
duke
parents:
diff changeset
    28
# (e.g. proxy.mydomain.com), proxyPort is the port number to use (default
90ce3da70b43 Initial load
duke
parents:
diff changeset
    29
# value is 80) and nonProxyHosts is a '|' separated list of hostnames which
90ce3da70b43 Initial load
duke
parents:
diff changeset
    30
# should be accessed directly, ignoring the proxy server (default value is
90ce3da70b43 Initial load
duke
parents:
diff changeset
    31
# localhost & 127.0.0.1).
90ce3da70b43 Initial load
duke
parents:
diff changeset
    32
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    33
# http.proxyHost=
90ce3da70b43 Initial load
duke
parents:
diff changeset
    34
# http.proxyPort=80
3855
653df3a7256d 6737819: sun.misc.net.DefaultProxySelector doesn't use proxy setting to localhost
jccollet
parents: 2
diff changeset
    35
http.nonProxyHosts=localhost|127.*|[::1]
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    36
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    37
# HTTPS Proxy Settings. proxyHost is the name of the proxy server
90ce3da70b43 Initial load
duke
parents:
diff changeset
    38
# (e.g. proxy.mydomain.com), proxyPort is the port number to use (default
90ce3da70b43 Initial load
duke
parents:
diff changeset
    39
# value is 443). The HTTPS protocol handlers uses the http nonProxyHosts list.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    40
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    41
# https.proxyHost=
90ce3da70b43 Initial load
duke
parents:
diff changeset
    42
# https.proxyPort=443
90ce3da70b43 Initial load
duke
parents:
diff changeset
    43
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    44
# FTP Proxy settings. proxyHost is the name of the proxy server
90ce3da70b43 Initial load
duke
parents:
diff changeset
    45
# (e.g. proxy.mydomain.com), proxyPort is the port number to use (default
90ce3da70b43 Initial load
duke
parents:
diff changeset
    46
# value is 80) and nonProxyHosts is a '|' separated list of hostnames which
90ce3da70b43 Initial load
duke
parents:
diff changeset
    47
# should be accessed directly, ignoring the proxy server (default value is
90ce3da70b43 Initial load
duke
parents:
diff changeset
    48
# localhost & 127.0.0.1).
90ce3da70b43 Initial load
duke
parents:
diff changeset
    49
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    50
# ftp.proxyHost=
90ce3da70b43 Initial load
duke
parents:
diff changeset
    51
# ftp.proxyPort=80
3855
653df3a7256d 6737819: sun.misc.net.DefaultProxySelector doesn't use proxy setting to localhost
jccollet
parents: 2
diff changeset
    52
ftp.nonProxyHosts=localhost|127.*|[::1]
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    53
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    54
# Socks proxy settings. socksProxyHost is the name of the proxy server
90ce3da70b43 Initial load
duke
parents:
diff changeset
    55
# (e.g. socks.domain.com), socksProxyPort is the port number to use
90ce3da70b43 Initial load
duke
parents:
diff changeset
    56
# (default value is 1080)
90ce3da70b43 Initial load
duke
parents:
diff changeset
    57
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    58
# socksProxyHost=
90ce3da70b43 Initial load
duke
parents:
diff changeset
    59
# socksProxyPort=1080
90ce3da70b43 Initial load
duke
parents:
diff changeset
    60
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    61
# HTTP Keep Alive settings. remainingData is the maximum amount of data
52725
c470f977ade8 8214014: Remove vestiges of gopher: protocol proxy support
rriggs
parents: 52554
diff changeset
    62
# in kilobytes that will be cleaned off the underlying socket so that it
c470f977ade8 8214014: Remove vestiges of gopher: protocol proxy support
rriggs
parents: 52554
diff changeset
    63
# can be reused (default value is 512K), queuedConnections is the maximum
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    64
# number of Keep Alive connections to be on the queue for clean up (default
90ce3da70b43 Initial load
duke
parents:
diff changeset
    65
# value is 10).
90ce3da70b43 Initial load
duke
parents:
diff changeset
    66
# http.KeepAlive.remainingData=512
90ce3da70b43 Initial load
duke
parents:
diff changeset
    67
# http.KeepAlive.queuedConnections=10
41579
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    68
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    69
# Authentication Scheme restrictions for HTTP and HTTPS.
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    70
#
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    71
# In some environments certain authentication schemes may be undesirable
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    72
# when proxying HTTP or HTTPS.  For example, "Basic" results in effectively the
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    73
# cleartext transmission of the user's password over the physical network.
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    74
# This section describes the mechanism for disabling authentication schemes
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    75
# based on the scheme name. Disabled schemes will be treated as if they are not
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    76
# supported by the implementation.
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    77
#
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    78
# The 'jdk.http.auth.tunneling.disabledSchemes' property lists the authentication
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    79
# schemes that will be disabled when tunneling HTTPS over a proxy, HTTP CONNECT.
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    80
# The 'jdk.http.auth.proxying.disabledSchemes' property lists the authentication
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    81
# schemes that will be disabled when proxying HTTP.
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    82
#
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    83
# In both cases the property is a comma-separated list of, case-insensitive,
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    84
# authentication scheme names, as defined by their relevant RFCs. An
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    85
# implementation may, but is not required to, support common schemes whose names
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    86
# include: 'Basic', 'Digest', 'NTLM', 'Kerberos', 'Negotiate'.  A scheme that
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    87
# is not known, or not supported, by the implementation is ignored.
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    88
#
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    89
# Note: This property is currently used by the JDK Reference implementation. It
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    90
# is not guaranteed to be examined and used by other implementations.
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    91
#
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    92
#jdk.http.auth.proxying.disabledSchemes=
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    93
jdk.http.auth.tunneling.disabledSchemes=Basic
c0fe2e6364d9 8160838: Better HTTP service
chegar
parents: 25859
diff changeset
    94
52554
5f1ca46703f9 8213189: Make restricted headers in HTTP Client configurable and remove Date by default
michaelm
parents: 47216
diff changeset
    95
#
5f1ca46703f9 8213189: Make restricted headers in HTTP Client configurable and remove Date by default
michaelm
parents: 47216
diff changeset
    96
# Allow restricted HTTP request headers
5f1ca46703f9 8213189: Make restricted headers in HTTP Client configurable and remove Date by default
michaelm
parents: 47216
diff changeset
    97
#
5f1ca46703f9 8213189: Make restricted headers in HTTP Client configurable and remove Date by default
michaelm
parents: 47216
diff changeset
    98
# By default, the following request headers are not allowed to be set by user code
5f1ca46703f9 8213189: Make restricted headers in HTTP Client configurable and remove Date by default
michaelm
parents: 47216
diff changeset
    99
# in HttpRequests: "connection", "content-length", "expect", "host" and "upgrade".
5f1ca46703f9 8213189: Make restricted headers in HTTP Client configurable and remove Date by default
michaelm
parents: 47216
diff changeset
   100
# The 'jdk.httpclient.allowRestrictedHeaders' property allows one or more of these
52725
c470f977ade8 8214014: Remove vestiges of gopher: protocol proxy support
rriggs
parents: 52554
diff changeset
   101
# headers to be specified as a comma separated list to override the default restriction.
c470f977ade8 8214014: Remove vestiges of gopher: protocol proxy support
rriggs
parents: 52554
diff changeset
   102
# The names are case-insensitive and white-space is ignored (removed before processing
c470f977ade8 8214014: Remove vestiges of gopher: protocol proxy support
rriggs
parents: 52554
diff changeset
   103
# the list). Note, this capability is mostly intended for testing and isn't expected
c470f977ade8 8214014: Remove vestiges of gopher: protocol proxy support
rriggs
parents: 52554
diff changeset
   104
# to be used in real deployments. Protocol errors or other undefined behavior is likely
52554
5f1ca46703f9 8213189: Make restricted headers in HTTP Client configurable and remove Date by default
michaelm
parents: 47216
diff changeset
   105
# to occur when using them. The property is not set by default.
5f1ca46703f9 8213189: Make restricted headers in HTTP Client configurable and remove Date by default
michaelm
parents: 47216
diff changeset
   106
# Note also, that there may be other headers that are restricted from being set
5f1ca46703f9 8213189: Make restricted headers in HTTP Client configurable and remove Date by default
michaelm
parents: 47216
diff changeset
   107
# depending on the context. This includes the "Authorization" header when the
5f1ca46703f9 8213189: Make restricted headers in HTTP Client configurable and remove Date by default
michaelm
parents: 47216
diff changeset
   108
# relevant HttpClient has an authenticator set. These restrictions cannot be
5f1ca46703f9 8213189: Make restricted headers in HTTP Client configurable and remove Date by default
michaelm
parents: 47216
diff changeset
   109
# overridden by this property.
5f1ca46703f9 8213189: Make restricted headers in HTTP Client configurable and remove Date by default
michaelm
parents: 47216
diff changeset
   110
#
5f1ca46703f9 8213189: Make restricted headers in HTTP Client configurable and remove Date by default
michaelm
parents: 47216
diff changeset
   111
# jdk.httpclient.allowRestrictedHeaders=host
5f1ca46703f9 8213189: Make restricted headers in HTTP Client configurable and remove Date by default
michaelm
parents: 47216
diff changeset
   112
#
53328
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   113
#
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   114
# Transparent NTLM HTTP authentication mode on Windows. Transparent authentication
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   115
# can be used for the NTLM scheme, where the security credentials based on the
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   116
# currently logged in user's name and password can be obtained directly from the
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   117
# operating system, without prompting the user. This property has three possible
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   118
# values which regulate the behavior as shown below. Other unrecognized values
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   119
# are handled the same as 'disabled'. Note, that NTLM is not considered to be a
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   120
# strongly secure authentication scheme and care should be taken before enabling
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   121
# this mechanism.
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   122
#
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   123
# Transparent authentication never used.
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   124
#jdk.http.ntlm.transparentAuth=disabled
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   125
#
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   126
# Enabled for all hosts.
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   127
#jdk.http.ntlm.transparentAuth=allHosts
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   128
#
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   129
# Enabled for hosts that are trusted in Windows Internet settings
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   130
#jdk.http.ntlm.transparentAuth=trustedHosts
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   131
#
dff86e25073f 8209094: Improve web server connections
michaelm
parents: 52725
diff changeset
   132
jdk.http.ntlm.transparentAuth=disabled