comparison OrthancServer/Resources/Configuration.json @ 4190:9ce5c89328f5

New configuration options to enable HTTP peers identification through certificates
author Alain Mazy <alain@mazy.be>
date Tue, 15 Sep 2020 15:47:28 +0200
parents a8d2f4e65f05
children b1d528687e25
comparison
equal deleted inserted replaced
4189:15572f0bd743 4190:9ce5c89328f5
145 "RemoteAccessAllowed" : false, 145 "RemoteAccessAllowed" : false,
146 146
147 // Whether or not SSL is enabled 147 // Whether or not SSL is enabled
148 "SslEnabled" : false, 148 "SslEnabled" : false,
149 149
150 // Path to the SSL certificate in the PEM format (meaningful only if 150 // Path to the SSL certificate used by the HTTP server.
151 // SSL is enabled) 151 // Certifcate must be stored in the PEM format.
152 // meaningful only if SslEnabled is true.
153 // The file must contain both the certificate and the private key.
152 "SslCertificate" : "certificate.pem", 154 "SslCertificate" : "certificate.pem",
153 155
156 // Whether or not peer client certificates shall be checked.
157 // meaningfull only if SslEnabled is true
158 "SslVerifyPeers" : false,
159
160 // Path to the SSL certificate(s) that are trusted to verify
161 // peers identify.
162 // Certifcate(s) must be stored in the PEM format.
163 // meaningfull only if SslVerifyPeers is true
164 "SslTrustedClientCertificates" : "trustedClientCertificates.pem",
165
154 // Whether or not the password protection is enabled (using HTTP 166 // Whether or not the password protection is enabled (using HTTP
155 // basic access authentication). Starting with Orthanc 1.5.8, if 167 // basic access authentication). Starting with Orthanc 1.5.8, if
156 // "AuthenticationEnabled" is not explicitly set, authentication is 168 // "AuthenticationEnabled" is not explicitly set, authentication is
157 // enabled iff. remote access is allowed (i.e. the default value of 169 // enabled iff. remote access is allowed (i.e. the default value of
158 // "AuthenticationEnabled" equals that of "RemoteAccessAllowed"). 170 // "AuthenticationEnabled" equals that of "RemoteAccessAllowed").