/usr/share/doc/libglobus-gssapi-gsi-dev/html/gsi_8conf_8h_source.html is in libglobus-gssapi-gsi-doc 11.26-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 | <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
<meta name="generator" content="Doxygen 1.8.11"/>
<title>globus_gssapi_gsi: gsi.conf.h Source File</title>
<link href="tabs.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="jquery.js"></script>
<script type="text/javascript" src="dynsections.js"></script>
<link href="search/search.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="search/searchdata.js"></script>
<script type="text/javascript" src="search/search.js"></script>
<script type="text/javascript">
$(document).ready(function() { init_search(); });
</script>
<link href="doxygen.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
<div id="titlearea">
<table cellspacing="0" cellpadding="0">
<tbody>
<tr style="height: 56px;">
<td id="projectalign" style="padding-left: 0.5em;">
<div id="projectname">globus_gssapi_gsi
 <span id="projectnumber">11.26</span>
</div>
</td>
</tr>
</tbody>
</table>
</div>
<!-- end header part -->
<!-- Generated by Doxygen 1.8.11 -->
<script type="text/javascript">
var searchBox = new SearchBox("searchBox", "search",false,'Search');
</script>
<div id="navrow1" class="tabs">
<ul class="tablist">
<li><a href="index.html"><span>Main Page</span></a></li>
<li><a href="modules.html"><span>Modules</span></a></li>
<li class="current"><a href="files.html"><span>Files</span></a></li>
<li>
<div id="MSearchBox" class="MSearchBoxInactive">
<span class="left">
<img id="MSearchSelect" src="search/mag_sel.png"
onmouseover="return searchBox.OnSearchSelectShow()"
onmouseout="return searchBox.OnSearchSelectHide()"
alt=""/>
<input type="text" id="MSearchField" value="Search" accesskey="S"
onfocus="searchBox.OnSearchFieldFocus(true)"
onblur="searchBox.OnSearchFieldFocus(false)"
onkeyup="searchBox.OnSearchFieldChange(event)"/>
</span><span class="right">
<a id="MSearchClose" href="javascript:searchBox.CloseResultsWindow()"><img id="MSearchCloseImg" border="0" src="search/close.png" alt=""/></a>
</span>
</div>
</li>
</ul>
</div>
<div id="navrow2" class="tabs2">
<ul class="tablist">
<li><a href="files.html"><span>File List</span></a></li>
<li><a href="globals.html"><span>Globals</span></a></li>
</ul>
</div>
</div><!-- top -->
<!-- window showing the filter options -->
<div id="MSearchSelectWindow"
onmouseover="return searchBox.OnSearchSelectShow()"
onmouseout="return searchBox.OnSearchSelectHide()"
onkeydown="return searchBox.OnSearchSelectKey(event)">
</div>
<!-- iframe showing the search results (closed by default) -->
<div id="MSearchResultsWindow">
<iframe src="javascript:void(0)" frameborder="0"
name="MSearchResults" id="MSearchResults">
</iframe>
</div>
<div class="header">
<div class="headertitle">
<div class="title">gsi.conf.h</div> </div>
</div><!--header-->
<div class="contents">
<div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno"> 1</span> <span class="keyword">static</span> <span class="keywordtype">char</span> *globus_l_gsi_conf_string =</div><div class="line"><a name="l00002"></a><span class="lineno"> 2</span> <span class="stringliteral">"# Flag to choose SSL or TLS for GSSAPI protocol.\n"</span></div><div class="line"><a name="l00003"></a><span class="lineno"> 3</span> <span class="stringliteral">"# Set to true to disable SSLv3, or false to allow either to be \n"</span></div><div class="line"><a name="l00004"></a><span class="lineno"> 4</span> <span class="stringliteral">"# negotiated. The value of the GLOBUS_GSSAPI_FORCE_TLS environment\n"</span></div><div class="line"><a name="l00005"></a><span class="lineno"> 5</span> <span class="stringliteral">"# variable overrides this\n"</span></div><div class="line"><a name="l00006"></a><span class="lineno"> 6</span> <span class="stringliteral">"FORCE_TLS=false\n"</span></div><div class="line"><a name="l00007"></a><span class="lineno"> 7</span> <span class="stringliteral">"# GSSAPI Name compatiblity mode when trying to determine\n"</span></div><div class="line"><a name="l00008"></a><span class="lineno"> 8</span> <span class="stringliteral">"# if a host certificate is legitimate. GSI predates RFC2818,\n"</span></div><div class="line"><a name="l00009"></a><span class="lineno"> 9</span> <span class="stringliteral">"# so there are some old, less-secure, practices by default.\n"</span></div><div class="line"><a name="l00010"></a><span class="lineno"> 10</span> <span class="stringliteral">"# The different modes are:\n"</span></div><div class="line"><a name="l00011"></a><span class="lineno"> 11</span> <span class="stringliteral">"# STRICT_GT2:\n"</span></div><div class="line"><a name="l00012"></a><span class="lineno"> 12</span> <span class="stringliteral">"# Strictly backward-compatible with GT 2.0 name matching. \n"</span></div><div class="line"><a name="l00013"></a><span class="lineno"> 13</span> <span class="stringliteral">"# X.509 subjectAltName values are ignored. Names with\n"</span></div><div class="line"><a name="l00014"></a><span class="lineno"> 14</span> <span class="stringliteral">"# hyphens are treated as wildcarded such that \n"</span></div><div class="line"><a name="l00015"></a><span class="lineno"> 15</span> <span class="stringliteral">"# host-ANYTHING.example.com will match a certificate named\n"</span></div><div class="line"><a name="l00016"></a><span class="lineno"> 16</span> <span class="stringliteral">"# host.example.com. The name matching will rely on canonical\n"</span></div><div class="line"><a name="l00017"></a><span class="lineno"> 17</span> <span class="stringliteral">"# host (as resolved via getnameinfo) name associated with\n"</span></div><div class="line"><a name="l00018"></a><span class="lineno"> 18</span> <span class="stringliteral">"# a connection's IP addresses.\n"</span></div><div class="line"><a name="l00019"></a><span class="lineno"> 19</span> <span class="stringliteral">"# STRICT_RFC2818:\n"</span></div><div class="line"><a name="l00020"></a><span class="lineno"> 20</span> <span class="stringliteral">"# Support RFC 2818 server identity processing. Hyphen \n"</span></div><div class="line"><a name="l00021"></a><span class="lineno"> 21</span> <span class="stringliteral">"# characters are treated as normal part of a host name. \n"</span></div><div class="line"><a name="l00022"></a><span class="lineno"> 22</span> <span class="stringliteral">"# dnsName and ipAddress subjectAltName extensions are matched\n"</span></div><div class="line"><a name="l00023"></a><span class="lineno"> 23</span> <span class="stringliteral">"# against the host and port passed to GSSAPI. If subjectAltName \n"</span></div><div class="line"><a name="l00024"></a><span class="lineno"> 24</span> <span class="stringliteral">"# is present, X.509 SubjectName is ignored. \n"</span></div><div class="line"><a name="l00025"></a><span class="lineno"> 25</span> <span class="stringliteral">"# HYBRID:\n"</span></div><div class="line"><a name="l00026"></a><span class="lineno"> 26</span> <span class="stringliteral">"# Support a hybrid of the two previous name matching algorithms,\n"</span></div><div class="line"><a name="l00027"></a><span class="lineno"> 27</span> <span class="stringliteral">"# liberally matching both hyphen wildcards, canonical names\n"</span></div><div class="line"><a name="l00028"></a><span class="lineno"> 28</span> <span class="stringliteral">"# associated with IP addresses, and subjectAltName extensions.\n"</span></div><div class="line"><a name="l00029"></a><span class="lineno"> 29</span> <span class="stringliteral">"# This has been the default since GT 4.2\n"</span></div><div class="line"><a name="l00030"></a><span class="lineno"> 30</span> <span class="stringliteral">"NAME_COMPATIBILITY=HYBRID\n"</span></div><div class="line"><a name="l00031"></a><span class="lineno"> 31</span> <span class="stringliteral">"# OpenSSL Cipher List. This is an preference-ordered list of OpenSSL cipher\n"</span></div><div class="line"><a name="l00032"></a><span class="lineno"> 32</span> <span class="stringliteral">"# names. \n"</span></div><div class="line"><a name="l00033"></a><span class="lineno"> 33</span> <span class="stringliteral">"CIPHERS=HIGH\n"</span></div><div class="line"><a name="l00034"></a><span class="lineno"> 34</span> <span class="stringliteral">"# If true, when choosing a cipher, a server will use its own preferred\n"</span></div><div class="line"><a name="l00035"></a><span class="lineno"> 35</span> <span class="stringliteral">"# order instead of the cipher order presented by the client. When not set, the\n"</span></div><div class="line"><a name="l00036"></a><span class="lineno"> 36</span> <span class="stringliteral">"# SSL server will always follow the clients preferences.\n"</span></div><div class="line"><a name="l00037"></a><span class="lineno"> 37</span> <span class="stringliteral">"SERVER_CIPHER_ORDER=true\n"</span></div><div class="line"><a name="l00038"></a><span class="lineno"> 38</span> ;</div></div><!-- fragment --></div><!-- contents -->
<!-- start footer part -->
<hr class="footer"/><address class="footer"><small>
Generated by  <a href="http://www.doxygen.org/index.html">
<img class="footer" src="doxygen.png" alt="doxygen"/>
</a> 1.8.11
</small></address>
</body>
</html>
|