mirror of
https://gitee.com/BTAJL/repchain.git
synced 2024-11-30 02:38:24 +08:00
Merge remote-tracking branch 'origin/dev_jdk13_1.0' into dev_jdk13_1.0
This commit is contained in:
wuwei1972
commit
182280ce33
194
conf/system.conf
194
conf/system.conf
@ -1,90 +1,90 @@
|
||||
akka {
|
||||
actor {
|
||||
warn-about-java-serializer-usage = off#关闭Java序列化来序列化消息时的警告，建议不要开启。如果开启，开启值=on
|
||||
default-mailbox {
|
||||
#akka默认邮箱的选择，默认配置是akka.dispatch.SingleConsumerOnlyUnboundedMailbox，这是一个多生产者单消费者队列。建议不要修改此参数
|
||||
mailbox-type = "akka.dispatch.SingleConsumerOnlyUnboundedMailbox"
|
||||
}
|
||||
actor {
|
||||
warn-about-java-serializer-usage = off#关闭Java序列化来序列化消息时的警告，建议不要开启。如果开启，开启值=on
|
||||
default-mailbox {
|
||||
#akka默认邮箱的选择，默认配置是akka.dispatch.SingleConsumerOnlyUnboundedMailbox，这是一个多生产者单消费者队列。建议不要修改此参数
|
||||
mailbox-type = "akka.dispatch.SingleConsumerOnlyUnboundedMailbox"
|
||||
}
|
||||
|
||||
default-dispatcher{
|
||||
#akka dispatcher 配置，采用akka的默认的fork-join-executor，建议不要修改。
|
||||
parallelism-min =10 #最小的线程数
|
||||
parallelism-factor = 4.0 #并行因子配置
|
||||
parallelism-max = 100 #最大的线程数
|
||||
throughput = 80
|
||||
}
|
||||
default-dispatcher {
|
||||
#akka dispatcher 配置，采用akka的默认的fork-join-executor，建议不要修改。
|
||||
parallelism-min = 10 #最小的线程数
|
||||
parallelism-factor = 4.0 #并行因子配置
|
||||
parallelism-max = 100 #最大的线程数
|
||||
throughput = 80
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
remote {
|
||||
#classic模式下的配置
|
||||
classic{
|
||||
netty.tcp {
|
||||
//在单机单节点的情况下配置机器ip
|
||||
#hostname=192.168.10.155
|
||||
hostname=192.168.31.155
|
||||
//在单机单节点的情况下需要配置具体的端口；在单机多节点的情况下直接配置为0
|
||||
//port = 0
|
||||
//port=8082//0，automatic assign
|
||||
//internal (bind) hostname
|
||||
//bind-hostname=192.168.1.129
|
||||
//bind-port=8082
|
||||
}
|
||||
|
||||
netty.ssl.security {
|
||||
//基础路径，证书的存放路径，建议不要修改
|
||||
base-path = "jks/"
|
||||
//名称前缀，证书的名称前缀，不要修改
|
||||
base-name = ""
|
||||
//证书的别名，需要跟节点的名称要保持一致
|
||||
alias = "121000005l35120456.node1"
|
||||
|
||||
//用户ca文件密码
|
||||
key-store-password = "123"
|
||||
//用户证书密码
|
||||
key-password = "123"
|
||||
}
|
||||
}
|
||||
|
||||
#artery模式下的配置
|
||||
artery {
|
||||
#canonical.hostname = "192.168.10.155"
|
||||
canonical.hostname = "192.168.31.155"
|
||||
#canonical.port = 0
|
||||
}
|
||||
}
|
||||
|
||||
cluster {
|
||||
#种子节点的配置，在单机单节点的情况下需要配置种子节点的信息akka://
|
||||
#classic模式下的配置
|
||||
#seed-nodes = ["akka.tcp://Repchain@192.168.10.155:22522","akka.tcp://Repchain@192.168.10.155:22523","akka.tcp://Repchain@192.168.10.155:22524"]
|
||||
#seed-nodes = ["akka.ssl.tcp://Repchain@192.168.31.155:22522","akka.ssl.tcp://Repchain@192.168.31.155:22523","akka.ssl.tcp://Repchain@192.168.31.155:22524"]
|
||||
|
||||
#artery模式下的配置
|
||||
#seed-nodes = ["akka://Repchain@192.168.10.155:22522","akka://Repchain@192.168.10.155:22523","akka://Repchain@192.168.10.155:22524"]
|
||||
seed-nodes = ["akka://Repchain@192.168.31.155:22522","akka://Repchain@192.168.31.155:22523","akka://Repchain@192.168.31.155:22526"]
|
||||
remote {
|
||||
#classic模式下的配置
|
||||
classic {
|
||||
netty.tcp {
|
||||
//在单机单节点的情况下配置机器ip
|
||||
#hostname=192.168.10.155
|
||||
hostname = 192.168.31.155
|
||||
//在单机单节点的情况下需要配置具体的端口；在单机多节点的情况下直接配置为0
|
||||
//port = 0
|
||||
//port=8082//0，automatic assign
|
||||
//internal (bind) hostname
|
||||
//bind-hostname=192.168.1.129
|
||||
//bind-port=8082
|
||||
}
|
||||
|
||||
netty.ssl.security {
|
||||
//基础路径，证书的存放路径，建议不要修改
|
||||
base-path = "jks/"
|
||||
//名称前缀，证书的名称前缀，不要修改
|
||||
base-name = ""
|
||||
//证书的别名，需要跟节点的名称要保持一致
|
||||
alias = "121000005l35120456.node1"
|
||||
|
||||
//用户ca文件密码
|
||||
key-store-password = "123"
|
||||
//用户证书密码
|
||||
key-password = "123"
|
||||
}
|
||||
}
|
||||
|
||||
#artery模式下的配置
|
||||
artery {
|
||||
#canonical.hostname = "192.168.10.155"
|
||||
canonical.hostname = "192.168.31.155"
|
||||
#canonical.port = 0
|
||||
}
|
||||
}
|
||||
|
||||
cluster {
|
||||
#种子节点的配置，在单机单节点的情况下需要配置种子节点的信息akka://
|
||||
#classic模式下的配置
|
||||
#seed-nodes = ["akka.tcp://Repchain@192.168.10.155:22522","akka.tcp://Repchain@192.168.10.155:22523","akka.tcp://Repchain@192.168.10.155:22524"]
|
||||
#seed-nodes = ["akka.ssl.tcp://Repchain@192.168.31.155:22522","akka.ssl.tcp://Repchain@192.168.31.155:22523","akka.ssl.tcp://Repchain@192.168.31.155:22524"]
|
||||
|
||||
#artery模式下的配置
|
||||
#seed-nodes = ["akka://Repchain@192.168.10.155:22522","akka://Repchain@192.168.10.155:22523","akka://Repchain@192.168.10.155:22524"]
|
||||
seed-nodes = ["akka://Repchain@192.168.31.155:22522", "akka://Repchain@192.168.31.155:22523", "akka://Repchain@192.168.31.155:22526"]
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
akka.http {
|
||||
#akka 与http服务相关的配置
|
||||
idle-timeout = 100s#一个空闲连接超时时间配置，当空闲连接超时之后，将被自动关闭
|
||||
server {
|
||||
server-header = akka-http/${akka.http.version}#http服务头，建议不要修改
|
||||
idle-timeout = 100s#空闲连接超时时间，超时将自动关闭连接
|
||||
request-timeout = 100s #请求对超时时间
|
||||
max-connections = 1024#最大对连接数
|
||||
}
|
||||
client {
|
||||
idle-timeout = 100s #空闲连接超时时间，超时将自动关闭
|
||||
connecting-timeout = 100s#建立连接对超时时间
|
||||
}
|
||||
#akka 与http服务相关的配置
|
||||
idle-timeout = 100s#一个空闲连接超时时间配置，当空闲连接超时之后，将被自动关闭
|
||||
server {
|
||||
server-header = akka-http/${akka.http.version}#http服务头，建议不要修改
|
||||
idle-timeout = 100s#空闲连接超时时间，超时将自动关闭连接
|
||||
request-timeout = 100s #请求对超时时间
|
||||
max-connections = 1024#最大对连接数
|
||||
}
|
||||
client {
|
||||
idle-timeout = 100s #空闲连接超时时间，超时将自动关闭
|
||||
connecting-timeout = 100s#建立连接对超时时间
|
||||
}
|
||||
}
|
||||
|
||||
system {
|
||||
#创世节点的名称，在系统初始化时，将根据该节点是否是创世节点进行创世块的建立
|
||||
genesis_node_name="121000005l35120456.node1"
|
||||
#创世节点的名称，在系统初始化时，将根据该节点是否是创世节点进行创世块的建立
|
||||
genesis_node_name = "121000005l35120456.node1"
|
||||
#api是否开启
|
||||
#如果是单机多节点测试模式（Repchain，则选择0，默认节点1会开启）
|
||||
ws_enable = 1#api 0,不开启;1,开启
|
||||
@ -94,19 +94,19 @@ system {
|
||||
statistic_enable = 0 # 0,unable;able
|
||||
#实时图的事件是否发送，如果不发送，前端实时图将收不到任何消息。
|
||||
realtimegraph_enable = 1#0 unable;1 enable; default 1
|
||||
|
||||
|
||||
httpServicePort = 8081#http服务的端口号，默认为8081
|
||||
|
||||
checkCertValidate = 0#设置是否检查证书的有效性，默认为0 0=不校验，1=校验
|
||||
|
||||
|
||||
contractOperationMode = 0#设置合约的运行方式，0=debug方式，1=deploy，默认为debug方式，如果发布部署，必须使用deploy方式。
|
||||
|
||||
|
||||
number_of_transProcessor = 10#
|
||||
|
||||
|
||||
has_preload_trans_of_api = true#API接收交易时，是否做交易的预执行检查。默认值true
|
||||
|
||||
|
||||
is_verify_of_endorsement = true#在出块时，背书节点是否验证交易，默认值true
|
||||
|
||||
|
||||
number_of_endorsement = 2#该参数确认背书比例，可选值：1，2，3；如果等于1， 表示有一个出块签名就可以了；如果等于2，表示达成共识需要大于节点的1/2；如果等于3，表示达成共识需要大于节点的2/3；默认值是2.
|
||||
|
||||
block {
|
||||
@ -124,21 +124,21 @@ system {
|
||||
#最低投票人数量
|
||||
vote_note_min = 4
|
||||
#参与共识的节点别名
|
||||
vote_node_list = ["121000005l35120456.node1","12110107bi45jh675g.node2",
|
||||
"122000002n00123567.node3","921000005k36123789.node4"
|
||||
#]
|
||||
,"921000006e0012v696.node5"]
|
||||
vote_node_list = ["121000005l35120456.node1", "12110107bi45jh675g.node2",
|
||||
"122000002n00123567.node3", "921000005k36123789.node4"
|
||||
#]
|
||||
, "921000006e0012v696.node5"]
|
||||
}
|
||||
account{
|
||||
chaincodename = "ContractCert"#账户管理合约的名称
|
||||
account {
|
||||
chaincodename = "ContractCert"#账户管理合约的名称
|
||||
chaincodeversion = 1
|
||||
#证书状态改变函数名
|
||||
CertStatusChangeFunction="UpdateCertStatus"
|
||||
CertStatusChangeFunction = "UpdateCertStatus"
|
||||
}
|
||||
|
||||
diskspaceManager{
|
||||
diskspacealarm = 5000#磁盘最少空间大小，单位M ，小于这个值系统将不能启动。
|
||||
}
|
||||
diskspaceManager {
|
||||
diskspacealarm = 5000#磁盘最少空间大小，单位M ，小于这个值系统将不能启动。
|
||||
}
|
||||
|
||||
transaction {
|
||||
#辅助自动创建交易的间隔
|
||||
@ -152,11 +152,11 @@ system {
|
||||
node_stable_delay = 5000 #millis
|
||||
}
|
||||
|
||||
storage{
|
||||
dbpath="/Users/jiangbuyun/repchaindata/data/leveldbdata"
|
||||
blockpath="/Users/jiangbuyun/repchaindata/data/blockdata"
|
||||
filemax=200000000#单位为字节
|
||||
}
|
||||
storage {
|
||||
dbpath = "/Users/jiangbuyun/repchaindata/data/leveldbdata"
|
||||
blockpath = "/Users/jiangbuyun/repchaindata/data/blockdata"
|
||||
filemax = 200000000#单位为字节
|
||||
}
|
||||
|
||||
time {
|
||||
#通用稳定延迟
|
||||
@ -195,5 +195,5 @@ system {
|
||||
type = "CRFD"
|
||||
blocknumberofraft = 100
|
||||
}
|
||||
|
||||
|
||||
}
|
||||
@ -4,7 +4,7 @@ akka {
|
||||
loglevel = "INFO"
|
||||
logging-filter = "akka.event.slf4j.Slf4jLoggingFilter"
|
||||
|
||||
cluster{
|
||||
cluster {
|
||||
akka.cluster.log-info = on
|
||||
log-info-verbose = on
|
||||
#jmx.enabled = on
|
||||
@ -12,169 +12,167 @@ akka {
|
||||
#min-nr-of-members = 4
|
||||
}
|
||||
actor {
|
||||
serialize-messages = off
|
||||
serialize-creators = off
|
||||
enable-additional-serialization-bindings = on
|
||||
allow-java-serialization = off
|
||||
#provider = "akka.cluster.ClusterActorRefProvider"
|
||||
provider = "cluster"
|
||||
serializers {
|
||||
kryo = "com.twitter.chill.akka.AkkaSerializer"
|
||||
java = "akka.serialization.JavaSerializer"
|
||||
proto = "akka.remote.serialization.ProtobufSerializer"
|
||||
}
|
||||
|
||||
serialization-bindings {
|
||||
"java.lang.String" = java
|
||||
"java.io.Serializable" = kryo
|
||||
"com.google.protobuf.Message" = proto
|
||||
"scalapb.GeneratedMessage" = proto
|
||||
}
|
||||
serialize-messages = off
|
||||
serialize-creators = off
|
||||
enable-additional-serialization-bindings = on
|
||||
allow-java-serialization = off
|
||||
#provider = "akka.cluster.ClusterActorRefProvider"
|
||||
provider = "cluster"
|
||||
serializers {
|
||||
kryo = "com.twitter.chill.akka.AkkaSerializer"
|
||||
java = "akka.serialization.JavaSerializer"
|
||||
proto = "akka.remote.serialization.ProtobufSerializer"
|
||||
}
|
||||
|
||||
serialization-bindings {
|
||||
"java.lang.String" = java
|
||||
"java.io.Serializable" = kryo
|
||||
"com.google.protobuf.Message" = proto
|
||||
"scalapb.GeneratedMessage" = proto
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
remote {
|
||||
classic{
|
||||
netty.tcp{
|
||||
transport-class = "akka.remote.transport.netty.NettyTransport"
|
||||
#mesage传输块大小配置
|
||||
send-buffer-size = 2048000b
|
||||
receive-buffer-size = 2048000b
|
||||
maximum-frame-size = 1024000b
|
||||
enable-ssl = true
|
||||
ssl-engine-provider = akka.remote.transport.netty.ConfigSSLEngineProvider
|
||||
security {
|
||||
key-store = "jks/121000005l35120456.node1.jks"
|
||||
trust-store = "jks/mytruststore.jks" // 加载信任列表证书用的_tls1.3
|
||||
#trust-store = "jks/mytrust" // ssl用的_ca
|
||||
trust-store-mm = "jks/mytruststore.jks" // 加载信任列表证书用的_origin
|
||||
classic {
|
||||
netty.tcp {
|
||||
transport-class = "akka.remote.transport.netty.NettyTransport"
|
||||
#mesage传输块大小配置
|
||||
send-buffer-size = 2048000b
|
||||
receive-buffer-size = 2048000b
|
||||
maximum-frame-size = 1024000b
|
||||
enable-ssl = true
|
||||
ssl-engine-provider = akka.remote.transport.netty.ConfigSSLEngineProvider
|
||||
security {
|
||||
key-store = "jks/121000005l35120456.node1.jks"
|
||||
trust-store = "jks/mytruststore.jks" // 加载信任列表证书用的_tls1.3
|
||||
#trust-store = "jks/mytrust" // ssl用的_ca
|
||||
trust-store-mm = "jks/mytruststore.jks" // 加载信任列表证书用的_origin
|
||||
|
||||
key-store-password = "123"
|
||||
key-password = "123"
|
||||
trust-store-password = "changeme" // 加载信任列表证书用的_tls1.3
|
||||
#trust-store-password = "changeit" // ssl用的_ca
|
||||
trust-store-password-mm = "changeme" // 加载信任列表证书用的_origin
|
||||
key-store-password = "123"
|
||||
key-password = "123"
|
||||
trust-store-password = "changeme" // 加载信任列表证书用的_tls1.3
|
||||
#trust-store-password = "changeit" // ssl用的_ca
|
||||
trust-store-password-mm = "changeme" // 加载信任列表证书用的_origin
|
||||
|
||||
protocol = "TLSv1.3"
|
||||
enabled-algorithms = [TLS_AES_128_GCM_SHA256]
|
||||
require-mutual-authentication = on
|
||||
random-number-generator = "SecureRandom"
|
||||
}
|
||||
}
|
||||
netty.ssl.security {
|
||||
key-store = "jks/121000005l35120456.node1.jks"
|
||||
trust-store = "jks/mytruststore.jks" // 加载信任列表证书用的_tls1.3
|
||||
#trust-store = "jks/mytrust" // ssl用的_ca
|
||||
trust-store-mm = "jks/mytruststore.jks" // 加载信任列表证书用的_origin
|
||||
|
||||
key-store-password = "123"
|
||||
key-password = "123"
|
||||
trust-store-password = "changeme" // 加载信任列表证书用的_tls1.3
|
||||
#trust-store-password = "changeit" // ssl用的_ca
|
||||
trust-store-password-mm = "changeme" // 加载信任列表证书用的_origin
|
||||
|
||||
protocol = "TLSv1.3"
|
||||
enabled-algorithms = [TLS_AES_128_GCM_SHA256]
|
||||
require-mutual-authentication = on
|
||||
random-number-generator = "SecureRandom"
|
||||
}
|
||||
protocol = "TLSv1.3"
|
||||
enabled-algorithms = [TLS_AES_128_GCM_SHA256]
|
||||
require-mutual-authentication = on
|
||||
random-number-generator = "SecureRandom"
|
||||
}
|
||||
}
|
||||
netty.ssl.security {
|
||||
key-store = "jks/121000005l35120456.node1.jks"
|
||||
trust-store = "jks/mytruststore.jks" // 加载信任列表证书用的_tls1.3
|
||||
#trust-store = "jks/mytrust" // ssl用的_ca
|
||||
trust-store-mm = "jks/mytruststore.jks" // 加载信任列表证书用的_origin
|
||||
|
||||
key-store-password = "123"
|
||||
key-password = "123"
|
||||
trust-store-password = "changeme" // 加载信任列表证书用的_tls1.3
|
||||
#trust-store-password = "changeit" // ssl用的_ca
|
||||
trust-store-password-mm = "changeme" // 加载信任列表证书用的_origin
|
||||
|
||||
protocol = "TLSv1.3"
|
||||
enabled-algorithms = [TLS_AES_128_GCM_SHA256]
|
||||
require-mutual-authentication = on
|
||||
random-number-generator = "SecureRandom"
|
||||
}
|
||||
}
|
||||
|
||||
artery {
|
||||
|
||||
# Disable artery with this flag
|
||||
enabled = on
|
||||
|
||||
# Select the underlying transport implementation.
|
||||
# Possible values: aeron-udp, tcp, tls-tcp
|
||||
# Select the underlying transport implementation.
|
||||
# Possible values: aeron-udp, tcp, tls-tcp
|
||||
transport = tls-tcp
|
||||
#log-received-messages = on
|
||||
#log-sent-messages = on
|
||||
advanced {
|
||||
#log-received-messages = on
|
||||
#log-sent-messages = on
|
||||
advanced {
|
||||
|
||||
# Maximum serialized message size, including header data.
|
||||
maximum-frame-size = 1024 KiB
|
||||
# Maximum serialized message size, including header data.
|
||||
maximum-frame-size = 1024 KiB
|
||||
|
||||
# Direct byte buffers are reused in a pool with this maximum size.
|
||||
# Each buffer has the size of 'maximum-frame-size'.
|
||||
# This is not a hard upper limit on number of created buffers. Additional
|
||||
# buffers will be created if needed, e.g. when using many outbound
|
||||
# associations at the same time. Such additional buffers will be garbage
|
||||
# collected, which is not as efficient as reusing buffers in the pool.
|
||||
buffer-pool-size = 512
|
||||
# Direct byte buffers are reused in a pool with this maximum size.
|
||||
# Each buffer has the size of 'maximum-frame-size'.
|
||||
# This is not a hard upper limit on number of created buffers. Additional
|
||||
# buffers will be created if needed, e.g. when using many outbound
|
||||
# associations at the same time. Such additional buffers will be garbage
|
||||
# collected, which is not as efficient as reusing buffers in the pool.
|
||||
buffer-pool-size = 512
|
||||
|
||||
# Maximum serialized message size for the large messages, including header data.
|
||||
# It is currently restricted to 1/8th the size of a term buffer that can be
|
||||
# configured by setting the 'aeron.term.buffer.length' system property.
|
||||
# See 'large-message-destinations'.
|
||||
maximum-large-frame-size = 4 MiB
|
||||
# Maximum serialized message size for the large messages, including header data.
|
||||
# It is currently restricted to 1/8th the size of a term buffer that can be
|
||||
# configured by setting the 'aeron.term.buffer.length' system property.
|
||||
# See 'large-message-destinations'.
|
||||
maximum-large-frame-size = 4 MiB
|
||||
|
||||
# Direct byte buffers for the large messages are reused in a pool with this maximum size.
|
||||
# Each buffer has the size of 'maximum-large-frame-size'.
|
||||
# See 'large-message-destinations'.
|
||||
# This is not a hard upper limit on number of created buffers. Additional
|
||||
# buffers will be created if needed, e.g. when using many outbound
|
||||
# associations at the same time. Such additional buffers will be garbage
|
||||
# collected, which is not as efficient as reusing buffers in the pool.
|
||||
large-buffer-pool-size = 64
|
||||
# Direct byte buffers for the large messages are reused in a pool with this maximum size.
|
||||
# Each buffer has the size of 'maximum-large-frame-size'.
|
||||
# See 'large-message-destinations'.
|
||||
# This is not a hard upper limit on number of created buffers. Additional
|
||||
# buffers will be created if needed, e.g. when using many outbound
|
||||
# associations at the same time. Such additional buffers will be garbage
|
||||
# collected, which is not as efficient as reusing buffers in the pool.
|
||||
large-buffer-pool-size = 64
|
||||
|
||||
outbound-message-queue-size = 30720
|
||||
outbound-message-queue-size = 30720
|
||||
|
||||
#inbound-lanes = 1
|
||||
#inbound-lanes = 1
|
||||
|
||||
|
||||
#outbound-lanes = 1
|
||||
#outbound-lanes = 1
|
||||
|
||||
|
||||
}
|
||||
|
||||
# SSL configuration that is used when transport=tls-tcp.
|
||||
ssl {
|
||||
# Factory of SSLEngine.
|
||||
# Must implement akka.remote.artery.tcp.SSLEngineProvider and have a public
|
||||
# constructor with an ActorSystem parameter.
|
||||
# The default ConfigSSLEngineProvider is configured by properties in section
|
||||
# akka.remote.artery.ssl.config-ssl-engine
|
||||
|
||||
ssl-engine-provider = akka.remote.artery.tcp.ConfigSSLEngineProvider
|
||||
|
||||
# Config of akka.remote.artery.tcp.ConfigSSLEngineProvider
|
||||
config-ssl-engine {
|
||||
base-path = "jks/"
|
||||
key-store = "jks/121000005l35120456.node1.jks"
|
||||
trust-store = "jks/mytruststore.jks" // 加载信任列表证书用的_tls1.3
|
||||
#trust-store = "jks/mytrust" // ssl用的_ca
|
||||
trust-store-mm = "jks/mytruststore.jks" // 加载信任列表证书用的_origin
|
||||
|
||||
key-store-password = "123"
|
||||
key-password = "123"
|
||||
trust-store-password = "changeme" // 加载信任列表证书用的_tls1.3
|
||||
#trust-store-password = "changeit" // ssl用的_ca
|
||||
trust-store-password-mm = "changeme" // 加载信任列表证书用的_origin
|
||||
|
||||
protocol = "TLSv1.2"
|
||||
#enabled-algorithms = [TLS_AES_128_GCM_SHA256]
|
||||
enabled-algorithms = [TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256]
|
||||
#require-mutual-authentication = on
|
||||
random-number-generator = "SecureRandom"
|
||||
|
||||
# Require mutual authentication between TLS peers
|
||||
#
|
||||
# Without mutual authentication only the peer that actively establishes a connection (TLS client side)
|
||||
# checks if the passive side (TLS server side) sends over a trusted certificate. With the flag turned on,
|
||||
# the passive side will also request and verify a certificate from the connecting peer.
|
||||
#
|
||||
# To prevent man-in-the-middle attacks this setting is enabled by default.
|
||||
require-mutual-authentication = on
|
||||
|
||||
# Set this to `on` to verify hostnames with sun.security.util.HostnameChecker
|
||||
hostname-verification = off
|
||||
}
|
||||
|
||||
# SSL configuration that is used when transport=tls-tcp.
|
||||
ssl {
|
||||
# Factory of SSLEngine.
|
||||
# Must implement akka.remote.artery.tcp.SSLEngineProvider and have a public
|
||||
# constructor with an ActorSystem parameter.
|
||||
# The default ConfigSSLEngineProvider is configured by properties in section
|
||||
# akka.remote.artery.ssl.config-ssl-engine
|
||||
|
||||
ssl-engine-provider = akka.remote.artery.tcp.ConfigSSLEngineProvider
|
||||
|
||||
# Config of akka.remote.artery.tcp.ConfigSSLEngineProvider
|
||||
config-ssl-engine {
|
||||
base-path = "jks/"
|
||||
key-store = "jks/121000005l35120456.node1.jks"
|
||||
trust-store = "jks/mytruststore.jks" // 加载信任列表证书用的_tls1.3
|
||||
#trust-store = "jks/mytrust" // ssl用的_ca
|
||||
trust-store-mm = "jks/mytruststore.jks" // 加载信任列表证书用的_origin
|
||||
|
||||
key-store-password = "123"
|
||||
key-password = "123"
|
||||
trust-store-password = "changeme" // 加载信任列表证书用的_tls1.3
|
||||
#trust-store-password = "changeit" // ssl用的_ca
|
||||
trust-store-password-mm = "changeme" // 加载信任列表证书用的_origin
|
||||
|
||||
protocol = "TLSv1.2"
|
||||
#enabled-algorithms = [TLS_AES_128_GCM_SHA256]
|
||||
enabled-algorithms = [TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256]
|
||||
#require-mutual-authentication = on
|
||||
random-number-generator = "SecureRandom"
|
||||
|
||||
# Require mutual authentication between TLS peers
|
||||
#
|
||||
# Without mutual authentication only the peer that actively establishes a connection (TLS client side)
|
||||
# checks if the passive side (TLS server side) sends over a trusted certificate. With the flag turned on,
|
||||
# the passive side will also request and verify a certificate from the connecting peer.
|
||||
#
|
||||
# To prevent man-in-the-middle attacks this setting is enabled by default.
|
||||
require-mutual-authentication = on
|
||||
|
||||
# Set this to `on` to verify hostnames with sun.security.util.HostnameChecker
|
||||
hostname-verification = off
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
//创世块
|
||||
|
||||
Loading…
Reference in New Issue
Block a user