Aastra Telecom 41-001343-02 Https Server Certificate Validation Settings, Use of the https// URL

Operational, Basic, and Advanced Parameters

Parameter –	Configuration Files
https block http post xml	aastra.cfg, <model>.cfg, <mac>.cfg
Description	Enables or disables the blocking of XML scripts from HTTP POSTs.
	Some client applications use HTTP POSTs to transfer XML scripts. The phones’s HTTP
	server accepts these POSTs even if server redirection is enabled, effectively bypassing the
	secure connection. When this parameter is enabled (blocking is enabled), receipt of an
	HTTP POST containing an XML parameter header results in the following response:
	“403 Forbidden”. This forces the client to direct the POSTs to the HTTPS server through
	use of the “https://” URL.
Format	Boolean
Default Value	0	(disables blocking of XML HTTP POSTs)
Range	0	(disables blocking of XML HTTP POSTs)
	1	(enables blocking of XML HTTP POSTs)
Example	https block http post xml: 1

HTTPS Server Certificate Validation Settings

Parameter–	Configuration Files
https validate certificates	aastra.cfg, <model>.cfg, <mac>.cfg
Description	Enables or disables the HTTPS validation of certificates on the phone.
	When this parameter is set to 1, the HTTPS client performs validation on SSL certificates
	before accepting them.
	Notes:
	• If you are using HTTPS as a configuration method, and use a self signed certificate, you
	must set this parameter to “0” (disabled) before upgrading to Release 2.3 of the IP
	Phones.
	• Defining this parameter as "0" (disabled) significantly reduces security for the provision-
	ing process to encryption only. Validation of the chain-of-trust (i.e. the originator of the
	files) will not be performed if this feature is disabled. Therefore, disabling HTTPS valida-
	tion of certificates is only recommended for troubleshooting purposes or when self-
	signed certificates are in use.
Format	Boolean
Default Value	1 (enabled)
Range	0 (disabled)
	1 (enabled)
Example	https validate certificates: 0

A-31 41-001343-02 REV04 – 05.2014