#
# Copyright (c) 2016, 2018 Oracle and/or its affiliates. All rights reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

security-provider {
    # targets for outbound configuration
    outbound: [
        {
            # Targets specific onfiguration
            # default is "reserved" name - if provider has some internal
            # configuration, this way you may override it
            name = "default"
            # Protocols supported for outbound security, if empty, all match
            transports = ["https"]
            # Hosts for outbound security supported by this provider, if empty, all match
            # may use * to match any sequence
            # e.g *.opc.oracle.com
            hosts = ["a.b.com"]

            # Provider specific type (service to service, or service to service on behalf of user)
            type = "S2S"
        },
        {
            name = "obo"
            transports = ["https"]
            hosts = ["b.c.com", "d.e.org"]

            # Provider specific configuration
            type = "S2S_OBO"
            s2sPrivateKey = "~/.ssh/second_id_rsa"
            s2sCertificate = "~/.ssh/second_id_rsa.crt"
        }
    ]
}
