orthweb
orthweb copied to clipboard
instruction to turn off TLS for DICOM traffic
there are requests to turn off TLS on Envoy.
- be wary of the consequence of not using TLS
- In envoy.yaml, replace string "dicomtls" with "dicom"
- comment out the following sections below the line "cluster: service-dicom"
#transport_socket:
# name: envoy.transport_sockets.tls
# typed_config:
# "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
# common_tls_context:
# tls_certificates:
# - certificate_chain: {"filename": "/etc/ssl/certs/site.pem"}
# private_key: {"filename": "/etc/ssl/certs/site.pem"}
# validation_context:
# allow_expired_certificate: true
# trusted_ca: {"filename": "/etc/ssl/certs/site.pem"}
# require_client_certificate: false