inet-dist-tls.config.in

[
    {server, [
        {cacertfile,"##PWD##/tls-gen/basic/result/ca_certificate.pem"},
        {certfile, "##PWD##/tls-gen/basic/result/server_##HOSTNAME##_certificate.pem"},
        {keyfile, "##PWD##/tls-gen/basic/result/server_##HOSTNAME##_key.pem"},
        {verify, verify_peer},
        {fail_if_no_peer_cert, true},
        {versions, ['tlsv1.3']}
    ]},
    {client, [
        {cacertfile,"##PWD##/tls-gen/basic/result/ca_certificate.pem"},
        {certfile, "##PWD##/tls-gen/basic/result/client_##HOSTNAME##_certificate.pem"},
        {keyfile, "##PWD##/tls-gen/basic/result/client_##HOSTNAME##_key.pem"},
        {verify, verify_peer},
        {versions, ['tlsv1.3']},
        {customize_hostname_check, [
            {match_fun, public_key:pkix_verify_hostname_match_fun(https)}
        ]}
    ]}
].