AudioCodes Mediant 800B - Page 116

User's Manual 116 Document #: LTRT-10632
Mediant 800B Gateway & E-SBC
Parameter Description
DTLS Version
[TLSContexts_DTLSVersion]
Defines the Datagram Transport Layer Security (DTLS)
version, which is used to negotiate keys for WebRTC calls.
 [0] Any (default)
 [1] DTLSv1.0
 [2] DTLSv1.2
For more information on WebRTC, see WebRTC on page
774.
Note: The parameter is applicable only to the SBC
application.
Cipher Server
ciphers-server
[TLSContexts_ServerCipherString]
Defines the supported cipher suite for the TLS server (in
OpenSSL cipher list format).
The default is AES:RC4. For valid values, visit the OpenSSL
website at
https://www.openssl.org/docs/man1.0.2/apps/ciphers.html.
Cipher Client
ciphers-client
[TLSContexts_ClientCipherString]
Defines the supported cipher suite for TLS clients.
The default is DEFAULT.
For possible values and additional details, visit the OpenSSL
website at
https://www.openssl.org/docs/man1.0.2/apps/ciphers.html.
Strict Certificate Extension Validation
require-strict-cert
[TLSContexts_RequireStrictCert]
Enables the validation of the extensions (keyUsage and
extentedKeyUsage) of peer certificates. The validation
ensures that the signing CA is authorized to sign certificates
and that the end-entity certificate is authorized to negotiate a
secure TLS connection.
 [0] Disable (default)
 [1] Enable
DH Key Size
dh-key-size
[TLSContexts_DHKeySize]
Defines the Diffie-Hellman (DH) key size (in bits). DH is an
algorithm used chiefly for exchanging cryptography keys
used in symmetric encryption algorithms such as AES.
 [1024] 1024 (default)
 [2048] 2048
OCSP
OCSP Server
ocsp-server
[TLSContexts_OcspEnable]
Enables or disables certificate checking using OCSP.
 [0] Disable (default)
 [1] Enable
Primary OCSP Server
ocsp-server-primary
[TLSContexts_OcspServerPrimary]
Defines the IP address (in dotted-decimal notation) of the
primary OCSP server.
The default is 0.0.0.0.
Secondary OCSP Server
ocsp-server-secondary
[TLSContexts_OcspServerSecondary]
Defines the IP address (in dotted-decimal notation) of the
secondary OCSP server (optional).
The default is 0.0.0.0.
OCSP Port
ocsp-port
[TLSContexts_OcspServerPort]
Defines the OCSP server's TCP port number.
The default port is 2560.