ENT-2188 fix H2 insecure default configuration (#3692)

Set the "h2.allowedClasses" system property, require database password when exposing H2 server on non-localhost address, samples start H2 server by default (reintroduces the behaviour before h2Settings.address configuration option was added)
This commit is contained in:
szymonsztuka
2018-08-01 11:50:42 +01:00
committed by GitHub
parent 7182542724
commit c23167f08e
19 changed files with 220 additions and 15 deletions

View File

@ -54,6 +54,7 @@ task deployNodes(type: net.corda.plugins.Cordform, dependsOn: ['jar']) {
address "localhost:10003"
adminAddress "localhost:10004"
}
extraConfig = ['h2Settings.address' : 'localhost:10014']
cordapps = ["$project.group:finance:$corda_release_version"]
}
node {
@ -65,6 +66,7 @@ task deployNodes(type: net.corda.plugins.Cordform, dependsOn: ['jar']) {
address "localhost:10006"
adminAddress "localhost:10007"
}
extraConfig = ['h2Settings.address' : 'localhost:10015']
}
node {
name "O=Bank B,L=New York,C=US"
@ -75,6 +77,7 @@ task deployNodes(type: net.corda.plugins.Cordform, dependsOn: ['jar']) {
address "localhost:10009"
adminAddress "localhost:10010"
}
extraConfig = ['h2Settings.address' : 'localhost:10016']
}
node {
name "O=BankOfCorda,L=New York,C=US"
@ -85,6 +88,7 @@ task deployNodes(type: net.corda.plugins.Cordform, dependsOn: ['jar']) {
address "localhost:10012"
adminAddress "localhost:10013"
}
extraConfig = ['h2Settings.address' : 'localhost:10017']
}
}