import com.sun.jini.phoenix.*;
import com.sun.jini.config.KeyStores;
import net.jini.constraint.*;
import net.jini.core.constraint.*;
import net.jini.jeri.*;
import net.jini.jeri.*;
import net.jini.jeri.ssl.HttpsServerEndpoint;
import net.jini.jeri.security.*;
import net.jini.security.*;
import javax.security.auth.login.LoginContext;

principal {
    /*
     * JAAS principals
     */
    private static keystore = KeyStores.getKeyStore(
        "file:${com.sun.jini.qa.home}/harness/trust/truststore",
        null);
    private static phoenix = KeyStores.getX500Principal("phoenix", keystore);
} // principal

com.sun.jini.phoenix {
    /*
     * JAAS login context
     */
    loginContext = new LoginContext("com.sun.jini.Phoenix");

    /**
     * Phoenix config entries
     */

    private sslPort = 2000; // pick one, cannot be 1098
    private daemonEndpoint = HttpsServerEndpoint.getInstance(sslPort);
    private integrity = new BasicMethodConstraints(
        new InvocationConstraints(
            Integrity.YES,
            null
        ));

    systemExporter = new BasicJeriExporter(
        daemonEndpoint,
        new SystemAccessProxyTrustILFactory(integrity),
        false,
        true,
        PhoenixConstants.ACTIVATION_SYSTEM_UUID);
    activatorExporter = new BasicJeriExporter(
        daemonEndpoint,
        new ProxyTrustILFactory(integrity, null),
        false,
        true,
        PhoenixConstants.ACTIVATOR_UUID);
    monitorExporter = new BasicJeriExporter(
        daemonEndpoint,
        new ProxyTrustILFactory(integrity,MonitorPermission.class));
    registryExporter = new RegistrySunExporter();
    instantiatorPreparer = new BasicProxyPreparer(
        true,
        new BasicMethodConstraints(
            new InvocationConstraints(
                new InvocationConstraint[] {
                    Integrity.YES,
                    ClientAuthentication.YES,
                    ServerAuthentication.YES,
                    new ServerMinPrincipal(principal.phoenix)
                },
                null
        )),
        null);

    //groupTimeout = 1200000;
    //groupOptions = new String[] {
    //    "-Djava.security.properties=/vob/qa/configs/jeri/phoenix/debug-security.pr//s"  ,
    //    "-Djava.security.debug=access,failure"
    //};

    /**
     * Group config entries
     */
    private groupEndpoint = HttpsServerEndpoint.getInstance(0);

    instantiatorExporter = new BasicJeriExporter(
        groupEndpoint,
        new ProxyTrustILFactory(
            integrity,
            InstantiatorPermission.class
        ));
    systemPreparer = instantiatorPreparer;
    monitorPreparer = instantiatorPreparer;
    inheritGroupSubject = true;
} // com.sun.jini.phoenix