Https Server Certificate Validation Settings - Aastra 9000i Series Administrator's Manual

Parameter –
https block http post xml
HTTPS Server - Block XML
HTTP POSTs
(in Web UI)
Description
Format
Default Value
Range
Example

HTTPS Server Certificate Validation Settings

Parameter–
https validate certificates
Validate Certificates
(in Web UI)
Description
Format
Default Value
Range
Example
A-38
IP Phone UI
Aastra Web UI
Configuration Files
Enables or disables the blocking of XML scripts from HTTP POSTs.
Some client applications use HTTP POSTs to transfer XML scripts. The
phones's HTTP server accepts these POSTs even if server redirection is
enabled, effectively bypassing the secure connection. When this
parameter is enabled (blocking is enabled), receipt of an HTTP POST
containing an XML parameter header results in the following response:
"403 Forbidden". This forces the client to direct the POSTs to the HTTPS
server through use of the "https://" URL.
Boolean
0 (disables blocking of XML HTTP POSTs)
0 (disables blocking of XML HTTP POSTs)
1 (enables blocking of XML HTTP POSTs)
https block http post xml: 1
Configuration Files
IP Phone UI
Aastra Web UI
Enables or disables the HTTPS validation of certificates on the phone.
When this parameter is set to 1, the HTTPS client performs validation on
SSL certificates before accepting them.
Note: If you are using HTTPS as a configuration method, and use a self
signed certificate, you must set this parameter to "0" (disabled) before
upgrading to Release 2.3 of the IP Phones.
Boolean
1 (enabled)
0 (disabled)
1 (enabled)
https validate certificates: 0
Options->Administrator Menu->
Network Settings->HTTPS->
HTTPS Server->XML
Advanced Settings->Network->
Advanced Network Settings
aastra.cfg, <model>.cfg, <mac>.cfg
aastra.cfg, <model>.cfg, <mac>.cfg
Options->Administrator Menu->
Configuration Server->HTTPS Settings->
Cert Validation
Advanced Settings->Network->HTTPS Settings
41-001343-01 Rev 02, Release 3.2.2