Integration Manual

LISA-U2 series - System Integration Manual
UBX-13001118 - R25 Features description Page 146 of 182
3.6 HTTP
LISA-U2 modules support Hypertext Transfer Protocol (HTTP/1.0) functionalities as an HTTP client is
implemented: HEAD, GET, POST, DELETE and PUT operations are available. The file size to be
uploaded / downloaded depends on the free space available in the local file system (FFS) at the
moment of the operation. Up to 4 HTTP client contexts can be used simultaneously.
LISA-U2 modules also support Secure Hypertext Transfer Protocol functionalities providing SSL
encryption.
For more details about AT commands, see the u-blox AT Commands Manual [2].
3.7 SSL/TLS
The modules support the Secure Sockets Layer (SSL) / Transport Layer Security (TLS) with certificate
key sizes up to 4096 bits to provide security over the FTP and HTTP protocols.
The SSL/TLS support provides various connection security aspects:
 Server authentication
10
: use of the server certificate verification against a specific trusted
certificate or a trusted certificates list
 Client authentication
10
: use of the client certificate and the corresponding private key
 Data security and integrity: data encryption and Hash Message Authentication Code (HMAC)
generation
The security aspects used during a connection depend on the SSL/TLS configuration and features
supported. Table 55 contains the settings of the default SSL/TLS profile and Table 55 to Table 59
detail the main SSL/TLS supported capabilities of the products. For a complete list of supported
configurations and settings, see the u-blox AT Commands Manual [2].
Settings
Value
Meaning
Certificates validation level
Level 0
The server certificate will not be checked or verified
Minimum SSL/TLS version
Any
The server can use any of the TLS1.0/TLS1.1/TLS1.2 versions for the
connection
Cipher suite
Automatic
The cipher suite will be negotiated in the handshake process
Trusted root certificate internal name
None
No certificate will be used for the server authentication
Expected server host-name
None
No server host-name is expected
Client certificate internal name
None
No client certificate will be used
Client private key internal name
None
No client private key will be used
Client private key password
None
No client private key password will be used
Pre-shared key
None
No pre-shared key password will be used
Table 54: Default SSL/TLS profile
SSL/TLS Version
Supported feature
SSL 2.0
NO
SSL 3.0
YES
TLS 1.0
YES
TLS 1.1
YES
10
TLS 1.2
YES
10
Table 55: SSL/TLS version support
10
Not supported by the "01", "x2" and "68" product versions