AudioCodes Mediant 800 User Manual page 319

CHAPTER 16 Services
Parameter
'Additional Directive
Set'
directive-set
[HTTPLocation_
AdditionalDirectiveSet]
'Cache'
cache
[HTTPLocation_
Cache]
SSL
'TLS Context'
tls-context
[HTTPLocation_
TLSContext]
'Verify Certificate'
verify-cert
[HTTPLocation_
VerifyCertificate]
■ The NGINX directive for this parameter is "proxy_bind".
Assigns an NGINX directive set for the HTTP location. To configure
NGINX directives, see Configuring HTTP Directive Sets
page 286.
Enables the caching of files in this location.
■ [0] No
■ [1] Yes (default)
Note:
■ Currently, this feature is not supported.
■ The NGINX directive for this parameter is "proxy_cache
zone|off".
Assigns a TLS Context for the TLS connection with the HTTP
location.
To configure TLS Contexts, see
Contexts.
Note:
■ The parameter is applicable only if the connection protocol is
HTTPS (configured in the 'Upstream Scheme' parameter,
above).
■ The NGINX directives for this parameter are "proxy_ssl_
certificate", "proxy_ssl_certificate_key", "proxy_ssl_ciphers",
"proxy_ssl_protocols", and "proxy_ssl_password_file".
Enables TLS certificate verification when the connection with the
location is based on HTTPS. It verifies the certificate of the
incoming connection request from the Upstream Group.
■ [0] No = (Default) No certificate verification is done.
■ [1] Yes = The device verifies the authentication of the certificate
received from the HTTPS location. The device authenticates the
certificate against the trusted root certificate store associated
with the assigned TLS Context (see 'TLS Context' parameter
above) and if ok, allows communication with the HTTPS
location. If authentication fails, the device denies communication
(i.e., handshake fails). The device can also authenticate the
certificate by querying with an Online Certificate Status Protocol
(OCSP) server whether the certificate has been revoked. This is
also configured for the associated TLS Context.
Note:
■ The parameter is applicable only if the connection protocol is
HTTPS (configured in the 'Upstream Scheme' parameter,
above).
■ The NGINX directive for this parameter is "proxy_ssl_verify".
- 279 -
Mediant 800 Gateway & E-SBC | User's Manual
Description
Configuring TLS Certificate
on