diff OrthancServer/Resources/Configuration.json @ 4190:9ce5c89328f5

New configuration options to enable HTTP peers identification through certificates
author Alain Mazy <alain@mazy.be>
date Tue, 15 Sep 2020 15:47:28 +0200
parents a8d2f4e65f05
children b1d528687e25
line wrap: on
line diff
--- a/OrthancServer/Resources/Configuration.json	Tue Sep 15 08:27:17 2020 +0200
+++ b/OrthancServer/Resources/Configuration.json	Tue Sep 15 15:47:28 2020 +0200
@@ -147,10 +147,22 @@
   // Whether or not SSL is enabled
   "SslEnabled" : false,
 
-  // Path to the SSL certificate in the PEM format (meaningful only if
-  // SSL is enabled)
+  // Path to the SSL certificate used by the HTTP server.
+  // Certifcate must be stored in the PEM format.
+  // meaningful only if SslEnabled is true. 
+  // The file must contain both the certificate and the private key.
   "SslCertificate" : "certificate.pem",
 
+  // Whether or not peer client certificates shall be checked.
+  // meaningfull only if SslEnabled is true
+  "SslVerifyPeers" : false,
+
+  // Path to the SSL certificate(s) that are trusted to verify
+  // peers identify. 
+  // Certifcate(s) must be stored in the PEM format.
+  // meaningfull only if SslVerifyPeers is true
+  "SslTrustedClientCertificates" : "trustedClientCertificates.pem",
+  
   // Whether or not the password protection is enabled (using HTTP
   // basic access authentication). Starting with Orthanc 1.5.8, if
   // "AuthenticationEnabled" is not explicitly set, authentication is