# Set it to on if you want to use username provided by the proxy server. LoadMagicFile /usr/local/c-icap/etc/c-icap.magic # LoadMagicFile /usr/local/c-icap/etc/c-icap.magic # It can be used more than once to use multiple magic files. # Sets the default language to use for text templates TemplateDir /usr/local/c-icap/share/c_icap/templates/ # categorized by language and services/modules # The location of the text templates used by c-icap and its services, # ServicesDir /usr/local/c-icap/lib/c_icap # ModulesDir /usr/local/c-icap/lib/c_icap # If disabled the c-icap will return 500 response in these cases # Support 204 responses from services preview handler to the clients # When used the c-icap instead of allow 204 return "200 OK" responses # Try to handle requests from buggy clients, for example ICAP requests #Ğnable or disable ICAP requests pipelining # The acceptable range of levels is between 0 and 10. # The level of debugging information to be logged. # larger than the maximum size a temporary file is used. # The maximum memory size in bytes taken by an object which # dir is the location of temporary files. Used when displaying information about this # about this server (logs, info service, etc) # The group of users owning c-icap's processes, which, by default # TlsPassphrase /use/local/c-icap/scripts/cert-passphrase.sh The c-icap will pass as arguments the IP address and port number # Path to the script to run to get the passphrases of TLS certificates # tls-options=!SSL_OP_ALL:SSL_OP_NO_TICKET # By default the SSL_OP_ALL flag is set which enables all of the # For more options please see the SSL_set_options documentation. # Allow legacy insecure renegotiation between OpenSSL and # SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION # When performing renegotiation as a server, always start a # SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION # SSL_OP_NO_TICKET disable the use of RFC5077 session tickets # SSL_OP_NO_TLSv1_1 disable the use of TLSv1.1 # SSL_OP_NO_TLSv1_2 disable the use of TLSv1.2 # SSL_OP_NO_TLSv1 disable the use of TLSv1 # SSL_OP_NO_SSLv3 disable the use of SSLv3 # SSL_OP_NO_SSLv2 disable the use of SSLv2 # Collon separated lists of the ciphers to accept. # Directory containing additional CA certificates to use when If not configured the root.pem file will be used. # PEM file containing CA certificates to use when verifying client # is set then c-icap enables client certificates verification. # File containing all CA that we accept client certs from. # set then the c-icap searches for the key inside cert file. # The key of the configured certificate in pem format. # Set the certificate to use by the icap server. # SSLv23 TLSv1_2 TLSv1_1 TLSv1 SSLv3 SSLv2 # The port number that the c-icap server uses to listen for TLS/SSL # The port number that the c-icap server uses to listen to requests. # locking problems if one or more processes crashed. # posix Use posix semaphores: Use it with caution you may experienced # The interprocess locking scheme to use. # Format: InterProcessSharedMemScheme file | sysv | posix # mmap Use anonymous mmaped files as shared memory # posix Use posix shared memory (shm_open interface) # The interprocess shared mem scheme to use. # Format: InterProcessSharedMemScheme posix | mmap | sysv It can be disabled by setting its value to 0. # parameter is to minimize the risk of memory leaks and increase the #Ěfter this number has been reached, process dies. # The maximum number of requests that a child process can serve. # The number of threads per child process. # If the number of the available threads is more than number then # If the number of the available threads is less than number, # The maximum allowed number of server processes. # generates a number of threads, which serve the requests. # The initial number of server processes. # If the value is set to -1, there is no timeout. # The maximum time in seconds waiting for a new requests before a # The maximum number of requests can be served by one connection # The time in seconds after which a connection without activity #ĜommandsSocket /var/run/c-icap/c-icap.ctlĬommandsSocket /var/run/c-icap/c-icap.ctl # The path of file to use as control socket for c-icap # The file to store the pid of the main process of the c-icap server. # This file contains the default settings for c-icap
0 kommentar(er)
