Mitel 6867i Premium, Administrator'S Manual

Page: 731 / 1042

Operational, Basic, and Advanced Parameters
A-33
HTTPS SERVER CERTIFICATE VALIDATION SETTINGS
PARAMETER –
https block http post xml
CONFIGURATION FILES
startup.cfg, <model>.cfg, <mac>.cfg
DESCRIPTION
Enables or disables the blocking of XML scripts from HTTP POSTs.
Some client applications use HTTP POSTs to transfer XML scripts.
The phones’s HTTP server accepts these POSTs even if server
redirection is enabled, effectively bypassing the secure connection.
When this parameter is enabled (blocking is enabled), receipt of an
HTTP POST containing an XML parameter header results in the
following response:
“403 Forbidden”. This forces the client to direct the POSTs to the
HTTPS server through use of the “https://” URL.
FORMAT
Boolean
DEFAULT VALUE
0 (disables blocking of XML HTTP POSTs)
RANGE
0 (disables blocking of XML HTTP POSTs)
1 (enables blocking of XML HTTP POSTs)
EXAMPLE
https block http post xml: 1
PARAMETER –
https validate certificates
CONFIGURATION FILES
startup.cfg, <model>.cfg, <mac>.cfg
DESCRIPTION
Enables or disables the HTTPS validation of certificates on the
phone.
When this parameter is set to 1, the HTTPS client performs
validation on SSL certificates before accepting them.
Note:
Defining this parameter as "0" (disabled) significantly reduces
security for the provisioning process to encryption only. Validation of
the chain-of-trust (i.e. the originator of the files) will not be performed
if this feature is disabled. Therefore, disabling HTTPS validation of
certificates is only recommended for troubleshooting purposes or
when self-signed certificates are in use.
FORMAT
Boolean
DEFAULT VALUE
1 (enabled)
RANGE
0 (disabled)
1 (enabled)
EXAMPLE
https validate certificates: 0