changeset 465:5bb6bc85f99f

mysql new options
author Alain Mazy <alain@mazy.be>
date Mon, 13 Jul 2020 12:08:46 +0200
parents 5ea70331c0be
children b8c7519448d2 9c5263c89272
files Sphinx/source/plugins/mysql.rst
diffstat 1 files changed, 11 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/Sphinx/source/plugins/mysql.rst	Thu Jul 09 11:15:28 2020 +0200
+++ b/Sphinx/source/plugins/mysql.rst	Mon Jul 13 12:08:46 2020 +0200
@@ -99,6 +99,9 @@
       "Database" : "orthanc",
       "Username" : "orthanc",
       "Password" : "orthanc",
+      "EnableSsl" : false,     // force SSL connections
+      "SslVerifyServerCertificates": true, // verify server certificates if EnableSsl is true
+      "SslCACertificates": "", // path to CA certificates to validate servers
       "Lock" : true            // See section about Locking
     },
     "Plugins" : [
@@ -115,6 +118,14 @@
 UNIX (i.e. to instruct Orthanc not to use UNIX socket), the
 ``UnixSocket`` can be set to the empty string.
 
+**Remark:** To force using a TLS connection, you must set ``EnableSsl``
+to ``true``.  Once ``EnableSsl`` is ``true``, the ``SslVerifyServerCertificates``
+enables the check of server certificates (``true`` by default).
+The CA certificates used to verify the server certificate can be defined
+through ``SslCACertificates``; if not defined or empty, the value of the global
+Orthanc configuration ``HttpsCACertificates`` is used.  These options have been
+introduced in the mainline in July 2020 and have not yet been released.
+
 **Remark:** When using the ``Storage`` MySQL plugin, the DICOM files
 are stored as blobs in the database. This might actually consume more
 space than the DICOM file itself.