xSQL Web Services REST Parameters

The xSQL configuration file can be used to run the embedded REST server and expose the Web Services REST API.

For an overview see page Configuration File Parameters

The rest section consists of a set of "name : value" pairs enclosed within braces. For example:

 
    rest : {
        addr : 192.168.0.5, 
        port : 8083, 
 
        # HTTP basic authentication parameters. Authentication is disabled
        # if these parameters are not set.
        http_realm: "WebAPI",
        http_username: "user",
        http_password: "pass",
 
        # REST-specific SSL settings. See the global ssl_params section
        # for the description of the parameters and their default values.
        # These parameters override the global settings.
        # To inherit the global ssl_params settings, leave the ssl_params section empty.
        ssl_params : {
            cipher_list : "HIGH:!aNULL:!kRSA:!PSK:!SRP:!MD5:!RC4",
            max_cert_list : 102400,
            verify_mode : [verify_none],
            verify_depth : 100,
            cert_file_pem : "restcert.pem",
            pkey_file_pem : "restkey.pem"
        },
    },
    ... 
     

The following table lists the possible options for the rest section:

Option name : example value Comment
addr : 192.168.0.5, Set the listening address. If omitted, this parameter defaults to 0.0.0.0 which causes the REST server to accept incoming connections on all network interfaces (LAN, WiFi, whatever is installed). This default behavior can be undesirable or even dangerous. To restrict network access any valid IP address may be specified.
port : 8083, Set port for embedded REST server
http_realm: "WebAPI", The authentication realm (up to 15 characters)
http_username: "user", Authentication username (up to 15 characters)
http_password: "pass", Authentication password (up to 31 characters)
ssl_params : {...} REST-specific SSL settings. See the global ssl_params section for the description of the parameters and their default values. These parameters override the global settings. Global ssl_params settings are used if this section is omitted. (They have the same parameters and default values as the global section, except for ca_path and ca_file, which are only allowed in the global section.)