<?xml version="1.0"?>
<!--

-->
<configuration supports_do_not_extend="true">
  
  <property>
    <name>xasecure.policymgr.clientssl.keystore</name>
    <value>/usr/iop/current/knox-server/conf/ranger-plugin-keystore.jks</value>
    <description>Java Keystore files</description>
    <on-ambari-upgrade add="true"/>
  </property>

  <property>
    <name>xasecure.policymgr.clientssl.keystore.password</name>
    <value>myKeyFilePassword</value>
    <on-ambari-upgrade add="true"/>
    <property-type>PASSWORD</property-type>
    <description>password for keystore</description>
  </property>

  <property>
    <name>xasecure.policymgr.clientssl.truststore</name>
    <value>/usr/iop/current/knox-server/conf/ranger-plugin-truststore.jks</value>
    <description>java truststore file</description>
    <on-ambari-upgrade add="true"/>
  </property>

  <property>
    <name>xasecure.policymgr.clientssl.truststore.password</name>
    <value>changeit</value>
    <on-ambari-upgrade add="true"/>
    <property-type>PASSWORD</property-type>
    <description>java  truststore password</description>
  </property>

    <property>
    <name>xasecure.policymgr.clientssl.keystore.credential.file</name>
    <value>jceks://file{{credential_file}}</value>
    <description>java  keystore credential file</description>
    <on-ambari-upgrade add="true"/>
  </property>

  <property>
    <name>xasecure.policymgr.clientssl.truststore.credential.file</name>
    <value>jceks://file{{credential_file}}</value>
    <description>java  truststore credential file</description>
    <on-ambari-upgrade add="true"/>
  </property>

</configuration>
