User's Manual

Table Of Contents
Nonvolatile Parameter Database
AT+i Programmer‘s Manual Version 8.32 34-131
34.16.3 +iCERT Define SSL3/TLS1 Certificate
Syntax:
AT+iCERT=ct
Set iChip‘s SSL3/TLS1 certificate.
Some SSL3/TLS1 servers require the client side to
authenticate its identity by requesting the client to provide a
certificate during the SSL socket negotiation phase. This is
called ―client side authentication‖. If the CERT parameter
contains a certificate, iChip provides it to the server upon
request. iChip also needs a private key (see PKEY
parameter) in order to encrypt its certificate before sending
it to the server. In addition, the certificate should be signed
by a certificate authority accepted by the server for the
client side authentication to succeed.
Parameters:
ct = PEM format DER-encoded X509 Certificate
Command Options:
ct = <CR><CR>
Empty. No trusted certificate authority.
ct =<cert>
cert is used as iChip‘s certificate during client side
authentication. The certificate must be signed by a
certificate authority acceptable by the server.
iChip expects cert to be multiple lines separated by <CR>,
beginning with
-----BEGIN CERTIFICATE-----
and terminating with
-----END CERTIFICATE-----.
Default:
Empty. No trusted certificate authority defined.
Result code:
I/OK
If ct is an empty or legal certificate.
I/ERROR
Otherwise
AT+iCERT?
Displays current certificate contents. If the trusted certificate
is empty, only <CRLF> is returned, followed by I/OK.
AT+iCERT=?
Returns the message ‗String‘ followed by I/OK.