pykmip/server.conf at 53a4eca965c7bfddeaf5e40e4c5b3cf9c937f95d - pykmip - Gaunt Gitea

jgaunt/pykmip

mirror of https://github.com/openkmip/pykmip synced 2025-12-27 13:43:27 +00:00

Files

Peter Hamilton ee857ca4a3 Adding custom TLS cipher suite config option

This change adds a server configuration option, tls_cipher_suites,
allowing the server admin to specify a list of cipher suites to be
used when establishing TLS connections with clients. The custom
list supports both cipher suite specification and OpenSSL suite
naming conventions. The list is filtered through a KMIP-approved
set of cipher suites, and then through a set of cipher suites
suitable for the configured authentication suite. Additional debug
logging has been added to the server to provide transparency on
this process.

2017-09-20 11:40:52 -04:00

14 lines

362 B

Plaintext

Raw Blame History

 [server]
 hostname=127.0.0.1
 port=5696
 certificate_path=/etc/pykmip/certs/server_cert.pem
 key_path=/etc/pykmip/certs/server_private_key.pem
 ca_path=/etc/pykmip/certs/server_ca_cert.pem
 auth_suite=Basic
 policy_path=/etc/pykmip/policies
 enable_tls_client_auth=True
 tls_cipher_suites=
     EXAMPLE_CIPHER_SUITE_1
     EXAMPLE_CIPHER_SUITE_2
     EXAMPLE_CIPHER_SUITE_3