Mitel 6867i Administrator's Manual page 58

Mitel 6800 Series SIP Phone Release 4.2.0 Administrator Guide
HTTPS Server
The HTTPS server provides HTTP functionality over secure connections. It coexists with the
HTTP server but has its own set of tasks. The main HTTPS server functions are:
• Delivery of web page content to a browser client over a secure connection
• Execution of HTTP GET and POST requests received over a secure connection
NON-BLOCKING HTTP CONNECTIONS
The IP Phones support a non-blocking HTTP connection feature. This feature allows the user
to continue using the phone when there is a delay during an HTTP connection while the phone
is waiting for the HTTP server to respond. This feature also allows a user to abort the connection
and perform other operations on the phone (which will abort the HTTP connection
automatically). A user can also abort the HTTP loading by pressing the GOODBYE key while
the phone is displaying "Loading Page.......".
Note: This feature impacts only the HTTP calls triggered by a phone key (softkey or
programmable key); the HTTP calls performed by action URIs are still blocking.
Authentication Support for HTTP/HTTPS Download Methods for BroadSoft Client
Management System (CMS)
The IP Phones have authentication support as referenced in RFC 2617 when using HTTP or
HTTPS as download protocols. If a 5i Series phone is challenged by an HTTP or HTTPS server
when the server attempts to download the startup.cfg file, the phone automatically sends
"aastra" as the default Username and Password back to the server. For more information about
this feature, see Chapter 5, the section,
Methods, used with BroadSoft Client Management System (CMS)"
USING HTTPS VIA THE MITEL WEB UI
HTTPS is enabled by default on the IP phones. When you open a browser window and enter
an IP address or host name for a phone using HTTP, a server redirection occurs which
automatically converts an HTTP connection to an HTTPS connection. After the redirection, a
"Security Alert" certificate window displays alerting the user that information exchanged with
the phone cannot be viewed or changed by others. Accepting the certificate then forwards you
to the phone's Web UI.
Notes:
1. The private key and certificate generate outside the phone and embed in the phone
firmware for use by the HTTPS server during the SSL handshake.
2. Using the configuration files, the IP phone UI, or the Mitel Web UI, you can configure
the following regarding HTTPS:
• Specify HTTPS security client method to use (TLS 1.0 or SSL 3.0)
• Enable or disable HTTP to HTTPS server redirect function
• HTTPS server blocking of XML HTTP POSTS to the phone
2-7
"Authentication Support for HTTP/HTTPS Download
on page 5-314.