2018-09-03 22:50:33 +02:00
|
|
|
#!/usr/bin/env bash
|
|
|
|
|
|
|
|
|
|
set -x
|
|
|
|
|
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
|
|
|
|
<CoreConfiguration xmlns="http:/www.bos_bremen.de/2009/06/eID-Server-CoreConfig">
|
2018-09-04 11:37:50 +02:00
|
|
|
<ServerUrl>https://${PUBLIC_HOSTNAME}/eidas-middleware</ServerUrl>
|
2018-09-03 22:50:33 +02:00
|
|
|
<sessionManagerUsesDatabase>true</sessionManagerUsesDatabase>
|
|
|
|
|
<sessionMaxPendingRequests>500</sessionMaxPendingRequests>
|
|
|
|
|
<certificateWarningMargin>200</certificateWarningMargin>
|
|
|
|
|
<TimerConfiguration>
|
|
|
|
|
<certRenewal length="2" unit="11"/>
|
|
|
|
|
<blacklistRenewal length="2" unit="11"/>
|
|
|
|
|
<masterAndDefectListRenewal length="2" unit="11"/>
|
|
|
|
|
</TimerConfiguration>
|
2018-09-11 15:43:28 +02:00
|
|
|
<ServiceProvider entityID="qa-se-de-middleware" enabled="true">
|
2018-09-03 22:50:33 +02:00
|
|
|
<EPAConnectorConfiguration updateCVC="true">
|
2018-09-11 15:36:50 +02:00
|
|
|
<CVCRefID>qa-se-de-middleware</CVCRefID>
|
2018-09-03 22:50:33 +02:00
|
|
|
<PkiConnectorConfiguration>
|
2021-06-09 16:56:13 +02:00
|
|
|
<blackListTrustAnchor>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</blackListTrustAnchor>
|
|
|
|
|
<masterListTrustAnchor>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</masterListTrustAnchor>
|
2018-09-03 22:50:33 +02:00
|
|
|
<defectListTrustAnchor>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</defectListTrustAnchor>
|
|
|
|
|
<policyImplementationId>govDvca</policyImplementationId>
|
|
|
|
|
<sslKeys id="default">
|
2018-09-11 15:36:50 +02:00
|
|
|
<serverCertificate>${DEMW_TLS_SERVER_CERT}</serverCertificate>
|
|
|
|
|
<clientCertificate>${DEMW_TLS_CLIENT_CERT}</clientCertificate>
|
|
|
|
|
<clientKey>${DEMW_TLS_CLIENT_KEY}</clientKey>
|
2018-09-03 22:50:33 +02:00
|
|
|
</sslKeys>
|
|
|
|
|
<terminalAuthService sslKeysId="default">
|
2021-06-09 16:56:13 +02:00
|
|
|
<url>https://dvca-r1.governikus-eid.de/gov_dvca/ta-service</url>
|
2018-09-03 22:50:33 +02:00
|
|
|
</terminalAuthService>
|
|
|
|
|
<restrictedIdService sslKeysId="default">
|
2021-06-09 16:56:13 +02:00
|
|
|
<url>https://dvca-r1.governikus-eid.de/gov_dvca/ri-service</url>
|
2018-09-03 22:50:33 +02:00
|
|
|
</restrictedIdService>
|
|
|
|
|
<passiveAuthService sslKeysId="default">
|
2021-06-09 16:56:13 +02:00
|
|
|
<url>https://dvca-r1.governikus-eid.de/gov_dvca/pa-service</url>
|
2018-09-03 22:50:33 +02:00
|
|
|
</passiveAuthService>
|
|
|
|
|
<dvcaCertDescriptionService sslKeysId="default">
|
2021-06-09 16:56:13 +02:00
|
|
|
<url>https://dvca-r1.governikus-eid.de/gov_dvca/certDesc-service</url>
|
2018-09-03 22:50:33 +02:00
|
|
|
</dvcaCertDescriptionService>
|
|
|
|
|
</PkiConnectorConfiguration>
|
2018-09-11 15:36:50 +02:00
|
|
|
<PaosReceiverURL>https://${PUBLIC_HOSTNAME}/eidas-middleware/paosreceiver</PaosReceiverURL>
|
2021-06-09 16:56:13 +02:00
|
|
|
<hoursRefreshCVCBeforeExpires>240</hoursRefreshCVCBeforeExpires>
|
2018-09-03 22:50:33 +02:00
|
|
|
</EPAConnectorConfiguration>
|
|
|
|
|
</ServiceProvider>
|
|
|
|
|
</CoreConfiguration>
|
|
|
|
|
EOF
|
