On Thu, Apr 2, 2020 at 5:53 PM James H. H. Lampert <jam...@touchtonecorp.com> wrote: > Question: > > I'm looking at the header of a "java.security" properties file. And I see: > > # This is the "master security properties file". > > # > > # An alternate java.security properties file may be specified > > # from the command line via the system property > > # > > # -Djava.security.properties=<URL> > > Not quite sure I get this. What exactly do I need to set for <URL>, in > order to specify an override that's in the file system? Something > starting with "file:///"? And why is it a <URL>? That sounds like you > could set it to use an override file that's on some web server.
This isn't a "Tomcat question", so a bit off-topic ... This is strictly related to the JVM, so better off seeking answers in a Java forum. However, it should be noted, as quoted further in the configuration: [quote] if you specify "-Djava.security.properties==<URL>", using two equal signs, then that properties file completely overrides the master security properties file." [/quote] And furthermore [quote] To disable the ability to specify an additional properties file from the command line, set the key security.overridePropertiesFile to false in the master security properties file. It is set to true by default. [/quote] For example: security.overridePropertiesFile=false The samples I'm using are for OpenJDK 13 (11's the same, as others previous). As an explicit example (directly answering your question), one might do this - to append to java.security.properties=/home/java.security Or in the scenario where one wants to replace it java.security.properties==/home/java.security --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
