add SSL certs validation options for regions to allow simple encriptation without any peer autentification using simple homemade (or even shared) certs.

This commit is contained in:
UbitUmarov
2016-12-07 13:30:07 +00:00
parent 049dd374e9
commit 3a81642d97
6 changed files with 68 additions and 3 deletions

View File

@@ -295,6 +295,19 @@
;; default is false
; TelehubAllowLandmark = false
;; SSL certificate validation options
;; used also on contacting other peers that require SSL and we don't
;; you should set this to false forcing all peers (like regions) to have valid certificates
;; but you can allow selfsigned certificates or no official CA with next option true
;# {NoVerifyCertChain} {} {do not verify SSL Cert Chain} {true false} true
; NoVerifyCertChain = true
;; you can also bypass the hostname or domain verification
;# {NoVerifyCertHostname} {} {do not verify SSL Cert name versus peer name} {true false} true
; NoVerifyCertHostname = true
;; having both options true does provide encriptation, but low security
;; possible enought for small grids, specially it not comercial
[AccessControl]
;# {AllowedClients} {} {Bar (|) separated list of allowed clients} {}