infinispan-cere/spec/configs/infinispan-ssl1.xml

Infinispan Javascript client

<infinispan
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="urn:infinispan:config:11.0 https://infinispan.org/schemas/infinispan-config-11.0.xsd
                            urn:infinispan:server:11.0 https://infinispan.org/schemas/infinispan-server-11.0.xsd"
        xmlns="urn:infinispan:config:11.0"
        xmlns:server="urn:infinispan:server:11.0">

    <cache-container name="local" default-cache="default" statistics="true">
        <global-state/>
        <local-cache name="default">
            <locking acquire-timeout="30000" concurrency-level="1000"/>
            <encoding media-type="application/x-protostream"/>
        </local-cache>
        <local-cache name="memcachedCache">
            <locking acquire-timeout="30000" concurrency-level="1000"/>
            <encoding media-type="application/x-protostream"/>
        </local-cache>
        <local-cache name="namedCache">
            <encoding media-type="application/x-protostream"/>
        </local-cache>
    </cache-container>

    <server xmlns="urn:infinispan:server:11.0">
        <interfaces>
            <interface name="public">
                <inet-address value="${infinispan.bind.address:127.0.0.1}"/>
            </interface>
        </interfaces>

        <socket-bindings default-interface="public" port-offset="${infinispan.socket.binding.port-offset:0}">
            <socket-binding name="default" port="${infinispan.bind.port:11622}"/>
            <socket-binding name="memcached" port="11221"/>
            <socket-binding name="hotrod-auth" port="11242"/>
        </socket-bindings>

        <security>
            <security-realms>
                <security-realm name="ApplicationRealm">
                    <server-identities>
                        <ssl>
                            <keystore path="server.jks" relative-to="infinispan.server.config.path" keystore-password="secret"/>
                        </ssl>
                    </server-identities>
                    <properties-realm groups-attribute="Roles">
                        <user-properties path="users.properties" relative-to="infinispan.server.config.path" plain-text="true"/>
                        <group-properties path="groups.properties" relative-to="infinispan.server.config.path" />
                    </properties-realm>
                    <truststore-realm path="ca.jks" relative-to="infinispan.server.config.path" keystore-password="secret"/>
                </security-realm>
                <!-- JS MOD :: START :: add trusted and untrusted realms -->
                <security-realm name="Trust1Realm">
                    <server-identities>
                        <ssl>
                            <keystore path="trust1.jks" relative-to="infinispan.server.config.path" keystore-password="secret"/>
                        </ssl>
                    </server-identities>
                </security-realm>
                <security-realm name="Trust2Realm">
                    <server-identities>
                        <ssl>
                            <keystore path="trust2.jks" relative-to="infinispan.server.config.path" keystore-password="secret"/>
                        </ssl>
                    </server-identities>
                </security-realm>
                <security-realm name="UntrustRealm">
                    <server-identities>
                        <ssl>
                            <keystore path="untrust.jks" relative-to="infinispan.server.config.path" keystore-password="secret"/>
                        </ssl>
                    </server-identities>
                </security-realm>
            </security-realms>
        </security>

        <endpoints socket-binding="default" security-realm="ApplicationRealm">
            <hotrod-connector name="ssl-auth" socket-binding="hotrod-auth">
                <topology-state-transfer lock-timeout="1000" replication-timeout="5000"/>
                <encryption security-realm="ApplicationRealm" require-ssl-client-auth="true"/>
            </hotrod-connector>
            <rest-connector name="rest"/>
            <!-- Uncomment to enable the memcached connector -->
            <!-- memcached-connector socket-binding="memcached" / -->
        </endpoints>
    </server>
</infinispan>