comparison OrthancServer/Sources/main.cpp @ 4190:9ce5c89328f5

New configuration options to enable HTTP peers identification through certificates
author Alain Mazy <alain@mazy.be>
date Tue, 15 Sep 2020 15:47:28 +0200
parents 1c9c2c41c015
children d962a2996637
comparison
equal deleted inserted replaced
4189:15572f0bd743 4190:9ce5c89328f5
1015 else 1015 else
1016 { 1016 {
1017 httpServer.SetSslEnabled(false); 1017 httpServer.SetSslEnabled(false);
1018 } 1018 }
1019 1019
1020 if (lock.GetConfiguration().GetBooleanParameter("SslVerifyPeers", false))
1021 {
1022 std::string trustedClientCertificates = lock.GetConfiguration().InterpretStringParameterAsPath(
1023 lock.GetConfiguration().GetStringParameter("SslTrustedClientCertificates", "trustedCertificates.pem"));
1024 httpServer.SetSslVerifyPeers(true);
1025 httpServer.SetSslTrustedClientCertificates(trustedClientCertificates.c_str());
1026 }
1027 else
1028 {
1029 httpServer.SetSslVerifyPeers(false);
1030 }
1031
1020 if (lock.GetConfiguration().GetBooleanParameter("ExecuteLuaEnabled", false)) 1032 if (lock.GetConfiguration().GetBooleanParameter("ExecuteLuaEnabled", false))
1021 { 1033 {
1022 context.SetExecuteLuaEnabled(true); 1034 context.SetExecuteLuaEnabled(true);
1023 LOG(WARNING) << "====> Remote LUA script execution is enabled. Review your configuration option \"ExecuteLuaEnabled\". " 1035 LOG(WARNING) << "====> Remote LUA script execution is enabled. Review your configuration option \"ExecuteLuaEnabled\". "
1024 << "Your setup is POSSIBLY INSECURE <===="; 1036 << "Your setup is POSSIBLY INSECURE <====";