| FazBrowse GitHub Viewer | Trending | | Home |
| Tools: [Download Repo ZIP] [Original HTTPS Page] |
1 parent 4384f36 commit 9e597e1
1 file changed
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -296,8 +296,8 @@ Example:: | |||
| 296 | 296 | key_file: "key.pem" | |
| 297 | 297 | ||
| 298 | 298 | *key_file* is the name of a PEM formatted file that contains the private key | |
| 299 | - of the service. This is currently used both to encrypt/sign assertions and as | ||
| 300 | - the client key in an HTTPS session. | ||
| 299 | + of the service. This is currently used both to sign assertions and as | ||
| 300 | + the client key in an HTTPS (mutual TLS) session. | ||
| 301 | 301 | ||
| 302 | 302 | cert_file | |
| 303 | 303 | ^^^^^^^^^ | |
@@ -328,7 +328,14 @@ Example:: | |||
| 328 | 328 | encryption_keypairs | |
| 329 | 329 | ^^^^^^^^^^^^^^^^^^^ | |
| 330 | 330 | ||
| 331 | - Indicates which certificates will be used for encryption capabilities:: | ||
| 331 | + A list of dictionaries, each containing paths to the private and public keys | ||
| 332 | + used for encryption. The *key_file* refers to the PEM-formatted file that | ||
| 333 | + contains the private key for the service, while the *cert_file* refers to the | ||
| 334 | + corresponding public key (certificate) from the service's key pair. Both files | ||
| 335 | + must be in PEM format, and the *cert_file* should contain only a single | ||
| 336 | + certificate. | ||
| 337 | + | ||
| 338 | + Example:: | ||
| 332 | 339 | ||
| 333 | 340 | # Encryption | |
| 334 | 341 | 'encryption_keypairs': [ | |
| Back | FazBrowse Home | New Git URL |
0 commit comments