Mercurial > hg > orthanc
comparison OrthancServer/Sources/main.cpp @ 4190:9ce5c89328f5
New configuration options to enable HTTP peers identification through certificates
author | Alain Mazy <alain@mazy.be> |
---|---|
date | Tue, 15 Sep 2020 15:47:28 +0200 |
parents | 1c9c2c41c015 |
children | d962a2996637 |
comparison
equal
deleted
inserted
replaced
4189:15572f0bd743 | 4190:9ce5c89328f5 |
---|---|
1015 else | 1015 else |
1016 { | 1016 { |
1017 httpServer.SetSslEnabled(false); | 1017 httpServer.SetSslEnabled(false); |
1018 } | 1018 } |
1019 | 1019 |
1020 if (lock.GetConfiguration().GetBooleanParameter("SslVerifyPeers", false)) | |
1021 { | |
1022 std::string trustedClientCertificates = lock.GetConfiguration().InterpretStringParameterAsPath( | |
1023 lock.GetConfiguration().GetStringParameter("SslTrustedClientCertificates", "trustedCertificates.pem")); | |
1024 httpServer.SetSslVerifyPeers(true); | |
1025 httpServer.SetSslTrustedClientCertificates(trustedClientCertificates.c_str()); | |
1026 } | |
1027 else | |
1028 { | |
1029 httpServer.SetSslVerifyPeers(false); | |
1030 } | |
1031 | |
1020 if (lock.GetConfiguration().GetBooleanParameter("ExecuteLuaEnabled", false)) | 1032 if (lock.GetConfiguration().GetBooleanParameter("ExecuteLuaEnabled", false)) |
1021 { | 1033 { |
1022 context.SetExecuteLuaEnabled(true); | 1034 context.SetExecuteLuaEnabled(true); |
1023 LOG(WARNING) << "====> Remote LUA script execution is enabled. Review your configuration option \"ExecuteLuaEnabled\". " | 1035 LOG(WARNING) << "====> Remote LUA script execution is enabled. Review your configuration option \"ExecuteLuaEnabled\". " |
1024 << "Your setup is POSSIBLY INSECURE <===="; | 1036 << "Your setup is POSSIBLY INSECURE <===="; |