Datalogic AV7000 User Manual

UNDERSTANDING HTTPS SECURITY FOR AV FAMILY PRODUCTS
PRODUCT REFERENCE GUIDE 195
Understanding Verify Peer and Verify Host Options
Part of this security verifies Peer and/or Host Name. These options are explained below.
This will authenticate the HTTPS connection:
Verify peer – verify the certificate is valid.
Verify host – verify the certificate matches the target host
Analogy
If this certification were a drivers license, Verify Peer makes sure the license is valid. Ver-
ify Host checks that the name/photo on the license matches the person presenting it.
Ideally, users would always leave both options enabled.
But often for testing and some-
times for internal services, it’s useful to use self-signed certificates. Self-signed certs
allow TLS/SSL encryption, but they are not signed by any certificate authority and will
fail the “verify peer” check.
Depending on the network setup, users may also need to
disable “verify host”.
For the URL format, we allow standard http and https formats, with or without the port
numbers specified.
The URL should also contain the path to the specific endpoint that
the message is to be sent.
If using HTTP there is no TLS/SSL cert, causing the verify peer/host options to be
ignored.
For the Transport configuration, we support a single URL containing both the hostname
and path to the endpoint for sending data
(https://myhost.com:8443/path/to/data).
For Image Saving, we create separate “Server Path” and “Destination Directory” fields;
at runtime they are concatenated together to form the final URL.
Users may choose to
split the server+port from the path
(https://myhost.com:8443 and “/path/to/data”) or
enter the full URL in just the “Server Path” field
(https://myhost.com:443/path/to/
data).
Example Server and Destination Directory Settings
Server = http://myhost.com (uses default http port 80)
Destination Directory = path/to/endpoint
Server path used by camera = http://myhost.com/path/to/endpoint/
Server = http://myhost.com:8080/path/to/endpoint/ (uses HTTP over port 8080)
Destination Directory = (left Blank)
Server path used by device = http://myhost.com:8080/path/to/endpoint/
Server = https://myhost.com/path/to/endpoint/ (uses default https port 443)
Destination Directory = (left Blank)
Server path used by device = https://myhost.com/path/to/endpoint/
Server = https://myhost.com:8443 (uses HTTPS over port 8443)
Destination Directory = path/to/endpoint
Server Path used by device = https://myhost.com:8443/path/to/endpoint/

Datalogic AV7000 Specifications

General

Brand	Datalogic
Model	AV7000
Category	Digital Camera
Language	English