Aastra Telecom CT9143i - Manual (Page 29)

New Features in Release 2.3
RN-001029-02, Release 2.3, Rev 00 25
SIP IP Phone Models 9143i, 9480i, 9480i CT and 5i Series Phones Release Note 2.3
Parameter–
https validate expires
Check Certificate
Expiration
(in Web UI)
Configuration Files aastra.cfg, <mac>.cfg
IP Phone UI Options->Administrator Menu->
Configuration Server->HTTPS Settings->
Cert Validation->Check Expires
Aastra Web UI Advanced Settings->Network->HTTPS Settings
Description Enables or disables the HTTPS validation of the expiration of the certificates.
When this parameter is set to 1, the HTTPS client verifies whether or not a
certificate has expired prior to accepting the certificate.
Note: If the “https validate expires” parameter is set to enable, the clock on
the phone must be set for the phone to accept the certificates.
Format Boolean
Default Value 1 (enabled)
Range 0 (disabled)
1 (enabled)
Example https validate expires: 0
Parameter–
https validate hostnames
Check Certificate
Hostnames
(in Web UI)
Configuration Files aastra.cfg, <mac>.cfg
IP Phone UI Options->Administrator Menu->
Configuration Server->HTTPS Settings->
Cert Validation->Check Hostnames
Aastra Web UI Advanced Settings->Network->HTTPS Settings
Description Enables or disables the HTTPS validation of hostnames on the phone.
Format Boolean
Default Value 1 (enabled)
Range 0 (disabled)
1 (enabled)
Example https validate hostnames: 0
Parameter–
https user certificates
Trusted Certificates
Filename
(in Web UI)
Configuration Files aastra.cfg, <mac>.cfg
Aastra Web UI Advanced Settings->Network->HTTPS Settings
Description Specifies a file name for a .PEM file located on the configuration server. This
file contains the User-provided certificates in PEM format. These certificates
are used to validate peer certificates.
Note: You must disable the “https validate certificates” parameter in order
for the phone to accept the User-provided certificates.
Format Alphanumeric string in the format <filename.pem>
Default Value Not applicable
Range Not applicable
Example https user certificates: trustedCerts.pem