diff OrthancFramework/Sources/HttpServer/HttpServer.h @ 4381:df313e410f0c varian

Add support to configure minimimum accepted TLS version and cipher suite
author Andrew Wallis <andrew.wallis@varian.com>>
date Fri, 11 Dec 2020 11:59:10 -0500
parents db3932f9660d
children 3aacd2bd8bbc
line wrap: on
line diff
--- a/OrthancFramework/Sources/HttpServer/HttpServer.h	Thu Dec 17 12:48:14 2020 +0100
+++ b/OrthancFramework/Sources/HttpServer/HttpServer.h	Fri Dec 11 11:59:10 2020 -0500
@@ -97,6 +97,8 @@
     std::string trustedClientCertificates_;
     bool ssl_;
     std::string certificate_;
+    std::string sslMinimumVersion_;
+    std::string sslCiphers_;
     uint16_t port_;
     IIncomingHttpRequestFilter* filter_;
     bool keepAlive_;
@@ -141,6 +143,12 @@
 
     void SetSslVerifyPeers(bool enabled);
 
+    // set the minimum accepted version of SSL/TLS protocol according to the CivetWeb table published here:
+    // https://github.com/civetweb/civetweb/blob/master/docs/UserManual.md#ssl_protocol_version-0
+    void SetSslMinimumVersion(std::string version);
+
+    void SetSslCiphers(std::string ciphers);
+    
     void SetSslTrustedClientCertificates(const char* path);
 
     bool IsKeepAliveEnabled() const;