| servlet.hostname | Set to enabled to specify a static host name. Otherwise, the host name is determined by a lookup to the TCP naming system. |
| servlet.headerbuffer.size | Defines the size of the buffer for incoming HTTP header parameters. |
| servlet.acceptor | Number of acceptor threads to use, or -1 for default. If 0, selector threads accept connections. |
| servlet.port.http | Port for HTTP connections. |
| servlet.port.https | Port for HTTPS connections. |
| servlet.port.https.auth | Port for HTTPS authentication connections. |
| WebDavMaster.enabled | For WebDavListener channel: enables GET, PUT, POST, and HEAD methods. |
| WebDavMaster.allowed | For WebDavListener channel: allows all methods (including DELETE, PROPFIND, etc.). |
| WebDavMaster.auth | Determines whether authentication is required. |
| synchronous.timeout | Timeout (ms) for HTTP/SOAP synchronous processing. Sender gets HTTP 500 if exceeded. Value infinite may be used. |
| servlet.MINTHREADS | Minimum number of threads reserved for HTTP traffic. |
| servlet.MAXTHREADS | Maximum number of threads reserved for HTTP traffic. |
| SECURE.CIPHERS.MODE | Cipher suites used in SSL: DEFAULT = JVM defaults, ALL = all available ciphers. |
| SECURE.CIPHERS.EXCLUDE | Comma-separated list of excluded ciphers. default = server default. Supports regex. |
| SECURE.PROTOCOLLS.MODE | SSL protocols used: DEFAULT = JVM defaults, ALL = all available protocols. |
| SECURE.PROTOCOLLS.EXCLUDE | Comma-separated list of excluded SSL protocols. default = server default. |
| SECURE.send.default.identity | Whether Orchestra key pair is sent by default in HTTPS/SOAP: NEVER (default) or ALWAYS. |
| servlet.acceptqueuesize | Maximum number of incoming requests waiting for processing. Requests beyond this limit are denied. |
| servlet.maxidletime | Maximum time before a connection is treated as inactive. |
| servlet.sslport.cert.validity | Enables certificate expiration verification (true). Applies to all SSL connections. |
| servlet.sslport.cert.chain | Enables certificate chain verification (true). Applies to all SSL connections. |
| servlet.sslport.cert.ciphers | List of allowed certificate ciphers. If unset, the check is disabled. Applies to all SSL connections. |
| servlet.sslport.use.truststore | Uses Orchestra truststore to verify certificates. Applies to all SSL connections. |
| AS2ServerPort | HTTP port of Orchestra’s AS2 server. -1 = inactive. |
| AS2ServerPortTLS | TLS port of Orchestra’s AS2 server. -1 = inactive. |
| restservice.sensitive.error.response | If disabled, REST service providers do not return stack traces or sensitive info in errors. |
| services.soap.exportMetaData.wsdl | When true, allows generation of WSDL metadata for SOAP services. |
| services.rest.exportMetaData.wadl | When true, allows generation of WADL metadata for REST services. |
| services.rest.exportMetaData.openapi | When true, allows generation of OpenAPI metadata for REST services. |
| servlet.allowServicesAsPlainHttp | When true, Orchestra remote services can be accessed via HTTP; when false, only HTTPS is allowed. |