comparison OrthancServer/Resources/Configuration.json @ 4381:df313e410f0c varian

Add support to configure minimimum accepted TLS version and cipher suite
author Andrew Wallis <andrew.wallis@varian.com>>
date Fri, 11 Dec 2020 11:59:10 -0500
parents 85b5b0e1bac9
children 3aacd2bd8bbc
comparison
equal deleted inserted replaced
4379:85b5b0e1bac9 4381:df313e410f0c
167 // Path to the SSL certificate used by the HTTP server. The file 167 // Path to the SSL certificate used by the HTTP server. The file
168 // must be stored in the PEM format, and must contain both the 168 // must be stored in the PEM format, and must contain both the
169 // certificate and the private key. This option is only meaningful 169 // certificate and the private key. This option is only meaningful
170 // if "SslEnabled" is true. 170 // if "SslEnabled" is true.
171 "SslCertificate" : "certificate.pem", 171 "SslCertificate" : "certificate.pem",
172
173 // Sets the minimum accepted SSL protocol version
174 // See https://github.com/civetweb/civetweb/blob/master/docs/UserManual.md
175 // "ssl_protocol_version" for mapping
176 // By default require SSL 1.2
177 // This option is only meaningful if "SslEnabled" is true.
178 /**
179 "SslMinimumProtocolVersion" : "4",
180 **/
181
182 // Set the allowed ciphers for SSL connections
183 // If not set, this will default to FIPS 140-2 ciphers
184 // This option is only meaningful if "SslEnabled" is true.
185 /**
186 "SslCiphersAccepted" : "",
187 **/
172 188
173 // Whether or not peer client certificates shall be checked. This 189 // Whether or not peer client certificates shall be checked. This
174 // option is only meaningful if "SslEnabled" is true. 190 // option is only meaningful if "SslEnabled" is true.
175 "SslVerifyPeers" : false, 191 "SslVerifyPeers" : false,
176 192