
SARA-R4/N4 series - AT Commands Manual
UBX-17003787 - R09
19 SSL/TLS
Page 209 of 307
19.3.4 Notes
•
TLS_RSA_WITH_AES_128_CBC_SHA
TLS_RSA_WITH_AES_128_CBC_SHA256
TLS_RSA_WITH_AES_256_CBC_SHA
TLS_RSA_WITH_AES_256_CBC_SHA256
TLS_RSA_WITH_3DES_EDE_CBC_SHA
TLS_PSK_WITH_AES_128_CBC_SHA
TLS_PSK_WITH_AES_256_CBC_SHA
TLS_PSK_WITH_3DES_EDE_CBC_SHA
TLS_RSA_PSK_WITH_AES_128_CBC_SHA
TLS_RSA_PSK_WITH_AES_256_CBC_SHA
TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
TLS_PSK_WITH_AES_128_CBC_SHA256
TLS_PSK_WITH_AES_256_CBC_SHA384
TLS_RSA_PSK_WITH_AES_128_CBC_SHA256
TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
SARA-R4 SARA-N4
*
*
*
*
*
*
*
*
*
*
*
*
*
*
*
SARA-R410M-01B
*
*
*
*
*
Table 22: Cipher suite applicability
SARA-R4 / SARA-N4
• <op_code>=7, 8, 9 and 10 are not supported.
SARA-R410M-01B
• The unique certificate validation level (<op_code>=0) supported is the level 0 (no validation, <param_
val>=0).
• The unique minimum SSL/TLS version (<op_code>=1) supported is <param_val>=0 (the server can use
any version for the connection).
19.4 AT+USECMNG command example
Command
Response
Description
Step 1: Import a trusted root certificate using the stream of byte similar to
AT+USECMNG=0,0,"ThawteCA",
1516
>
Start the data transfer using the stream of
byte.
PEM encoded trusted root
certificate data.
+USECMNG: 1,0,"ThawteCA","8ccadc0
b22cef5be72ac411a11a8d812"
OK
Input PEM formatted trusted root
certificate data bytes. Output MD5 hash
string of the stored trusted root certificate
DER.
Step 2: List all available certificates and private keys
AT+USECMNG=3
CA, "ThawteCA","thawte Primary Root CA",
"2036/07/17"
OK
List all available certificates and private
keys.
Step 3: Set the security profile 2 validation level to trusted root
AT+USECPRF=2,0,1
OK
Security profile 2 has the validation level
set to trusted root.
Step 4: Set the security profile 2 trusted root certificate to the CA certificate imported as "ThawteCA"
AT+USECPRF=2,3,"ThawteCA"
OK
Security profile 2 will use the CA certificate
imported as "ThawteCA" for server
certificate validation.
Step 5: Use the configured USECMNG profile 2 with the UHTTP application
AT+UHTTP=0,1,"www.ssl_tls_
test_server.com"
OK
Configure the UHTTP server name.
AT+UHTTP=0,6,1,2
OK
Enable the SSL/TLS for the UHTTP profile
#0 and specify the SSL/TLS security
profile 2.
AT+UHTTPC=0,1,"/","https.resp"
OK
Execute the HTTP GET command.
+UUHTTPCR: 0,1,1
HTTP GET URC response.