AudioCodes Media Pack MP-11x, User Manual

Page: 510 / 650

User's Manual 510 Document #: LTRT-65432
MP-11x & MP-124
Parameter Description

[1] Enable
Note: If Subject Name verification is necessary, the parameter
PeerHostNameVerificationMode must be used as well.
Web: Strict Certificate Extension
Validation
[RequireStrictCert]
Enables the validation of the extensions (keyUsage and
extentedKeyUsage) of peer certificates. This validation ensures
that the signing CA is authorized to sign certificates and that the
end-entity certificate is authorized to negotiate a secure TLS
connection.

[0] Disable (default)

[1] Enable
Web/EMS: TLS Remote Subject
Name
[TLSRemoteSubjectName]
Defines the Subject Name that is compared with the name
defined in the remote side certificate when establishing TLS
connections.
If the SubjectAltName of the received certificate is not equal to
any of the defined Proxies Host names/IP addresses and is not
marked as 'critical', the Common Name (CN) of the Subject field
is compared with this value. If not equal, the TLS connection is
not established. If the CN uses a domain name, the certificate
can also use wildcards (‘*’) to replace parts of the domain
name.
The valid range is a string of up to 49 characters.
Note: This parameter is applicable only if the parameter
PeerHostNameVerificationMode is set to 1 or 2.
Web: Client Cipher String
[TLSClientCipherString]
Defines the cipher-suite string for TLS clients.
The valid value is up to 255 strings. The default is "ALL:!ADH".
For example: TLSClientCipherString = 'EXP'
This parameter complements the HTTPSCipherString
parameter (which affects TLS servers). For possible values and
additional details, visit the OpenSSL website at
https://www.openssl.org/docs/man1.0.2/apps/ciphers.html.
[TLSPkeySize]
Defines the key size (in bits) for RSA public-key encryption for
newly self-signed generated keys for SSH.

[512]

[768]

[1024] (default)

[2048]
Web: TLS FIPS 140 Mode
[TLS_Fips140_Mode]
Enables FIPS 140-2 conformance mode for TLS.

[0] Disable (default)

[1] Enable
44.4.5 SSH Parameters
Secure Shell (SSH) parameters are described in the table below.
Table 44-25: SSH Parameters
Parameter Description
Web/EMS: Enable SSH Server
[SSHServerEnable]
Enables the device's embedded SSH server.

[0] Disable (default)