Mitel 6867i Premium, Administrator'S Manual, Page: 57 / 1042

Configuration Methods
2-6
communicate, TLS ensures that no third party may eavesdrop or tamper with any message.
TLS is the successor to SSL.
HTTP/HTTPS CLIENT AND SERVER SUPPORT
The Mitel IP phones allow for HTTP request processing and associated data transfers to perform
over a secure connection (HTTPS). The IP phones support the following:
• Transfer of firmware images, configuration files, script files, and web page content over a
secure connection.
• Web browser phone configuration over a secure connection
• TLS 1.0 or SSL 3.0 methods for both client and server
The following TLS 1.0 and SSL 3.0 ciphers and cipher suites are supported by the phone:
HTTPS Client
When an HTTPS client opens and closes its TCP socket, the SSL software respectively
handshakes upon opening and disconnects upon closing from the HTTPS server. The main
HTTPS client functions are:
• Downloading of configuration files and firmware images
• Downloading of script files based on an “HTTPS://” URL supplied by a softkey definition
Note:
HTTPS uses port 443 instead of HTTP port 80 in its interactions with the TCP/IP
lower layer. Both the HTTP and HTTPS port numbers are configurable using the
configuration files, the IP Phone UI, the Mitel Web UI and DHCP Option 66. For more
information about configuring these ports, see Chapter 4, the section,
“Configuring the
Configuration Server Protocol” on page 4-99 .
CIPHER CIPHER SUITES
AES128 AES128-SHA
AES256 AES256-SHA
CAMELLIA128 CAMELLIA128-SHA
CAMELLIA256 CAMELLIA256-SHA
DES DES-CBC-SHA, DES-CBC3-SHA
DHE DHE-DSS-AES128-SHA, DHE-DSS-AES256-SHA,
DHE-DSS-CAMELLIA128-SHA, DHE-DSS-CAMELLIA256-SHA,
DHE-DSS-SEED-SHA, DHE-RSA-AES128-SHA,
DHE-RSA-AES256-SHA, DHE-RSA-CAMELLIA128-SHA,
DHE-RSA-CAMELLIA256-SHA, DHE-RSA-SEED-SHA
EDH EDH-DSS-DES-CBC3-SHA, EDH-DSS-DES-CBC-SHA,
EDH-RSA-DES-CBC3-SHA, EDH-RSA-DES-CBC-SHA
RC4 RC4-MD5, RC4-SHA
SEED SEED-SHA