Media5 Mediatrix 4104, Справочное руководство

Страница: 228 / 466

Chapter 13 - Software Download Before Downloading
206 Mediatrix 4104
Configuring the HTTPS Server
If you are to perform a software download that requires authentication or privacy by using the HTTP over the
Transport Layer Security (TLS) protocol (HTTPS), you must install a HTTPS server running on the PC
designated as the server host. It is assumed that you know how to set the root path and set the SSL/TLS
security configuration. If not, refer to your HTTPS server’s documentation.
The Mediatrix 4104 supports the following SSL/TLS parameters:
Certificates
The Mediatrix 4104 contains embedded security certificates formatted as per ITU x.509 and RFC 3280. The
certificates are factory-installed. The name of X.509 certificates currently installed in the Mediatrix 4104 are
listed in the
securityCertificatesMIB under the certificateName variable (under the certificateTable group). You
must have at least one matching certificate on your HTTPS server.
You can also find the following information:
Standards Supported • RFC 2246 – The TLS Protocol Version 1.0
• RFC 2818 – HTTP Over TLS
• RFC 2459 – X.509 Digital Certificates
• RFC 3280 – Internet X.509 Public Key Infrastructure
Certificate and Certificate Revocation List (CRL) Profile
Caution:
You must have a time server SNTP that is accessible and properly configured, or the automatic
software update feature may not work properly. It is assumed that you know how to configure your SNTP
server. If not, refer to your SNTP server’s documentation. You can also refer to
“Chapter 20 - SNTP Settings”
on page 287 for more details on how to configure the Mediatrix 4104 for a SNTP server.
Table 125: Secure Parameters Supported
Supported Parameter Description
Key Exchange Mechanism • RSA
• Diffie-Hellman
Ciphers • AES (128 and 256 bits)
• 3DES (168 bits)
Message Digests • SHA-1
Note:
Media5 recommends to use cipher suites based on the RSA key exchange mechanism, because the
Diffie-Hellman key exchange mechanism introduces a noticeable delay in the HTTPS session
establishment.
Table 126: Certificates
Parameter Description
certificateSubjectCommonName The certificate's subject name.
If the certificate contains a subject field, display the common name.
Otherwise display the first non-empty subject alternative name from the
following list:
• Uniform Resource Locator
• DNS name
• IP Address
• RFC 822 name
See RFC 3280 sections 4.1.2.6 and 4.2.1.7 for details.