# HG changeset patch # User Alain Mazy # Date 1594634926 -7200 # Node ID 5bb6bc85f99f9b05a6e34c81b71893461ad02c78 # Parent 5ea70331c0be1bf47cdc733ed03933957eafd051 mysql new options diff -r 5ea70331c0be -r 5bb6bc85f99f Sphinx/source/plugins/mysql.rst --- a/Sphinx/source/plugins/mysql.rst Thu Jul 09 11:15:28 2020 +0200 +++ b/Sphinx/source/plugins/mysql.rst Mon Jul 13 12:08:46 2020 +0200 @@ -99,6 +99,9 @@ "Database" : "orthanc", "Username" : "orthanc", "Password" : "orthanc", + "EnableSsl" : false, // force SSL connections + "SslVerifyServerCertificates": true, // verify server certificates if EnableSsl is true + "SslCACertificates": "", // path to CA certificates to validate servers "Lock" : true // See section about Locking }, "Plugins" : [ @@ -115,6 +118,14 @@ UNIX (i.e. to instruct Orthanc not to use UNIX socket), the ``UnixSocket`` can be set to the empty string. +**Remark:** To force using a TLS connection, you must set ``EnableSsl`` +to ``true``. Once ``EnableSsl`` is ``true``, the ``SslVerifyServerCertificates`` +enables the check of server certificates (``true`` by default). +The CA certificates used to verify the server certificate can be defined +through ``SslCACertificates``; if not defined or empty, the value of the global +Orthanc configuration ``HttpsCACertificates`` is used. These options have been +introduced in the mainline in July 2020 and have not yet been released. + **Remark:** When using the ``Storage`` MySQL plugin, the DICOM files are stored as blobs in the database. This might actually consume more space than the DICOM file itself.