Ublox SARA-R4 Series - AT+USECMNG Command Example

SARA-R4/N4 series-AT Commands Manual
UBX-17003787 - R09

19SSL/TLS
Page 209 of 307
19.3.4Notes
•
TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_PSK_WITH_AES_128_CBC_SHA TLS_PSK_WITH_AES_256_CBC_SHA TLS_PSK_WITH_3DES_EDE_CBC_SHA TLS_RSA_PSK_WITH_AES_128_CBC_SHA TLS_RSA_PSK_WITH_AES_256_CBC_SHA TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA TLS_PSK_WITH_AES_128_CBC_SHA256 TLS_PSK_WITH_AES_256_CBC_SHA384 TLS_RSA_PSK_WITH_AES_128_CBC_SHA256 TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
SARA-R4 SARA-N4 * * * * * * * * * * * * * * *
SARA-R410M-01B * * * * *
Table 22: Cipher suite applicability
SARA-R4 / SARA-N4
• <op_code>=7, 8, 9 and 10 are not supported.
SARA-R410M-01B
• The unique certificate validation level (<op_code>=0) supported is the level 0 (no validation, <param_
val>=0).
• The unique minimum SSL/TLS version (<op_code>=1) supported is <param_val>=0 (the server can use
any version for the connection).
19.4AT+USECMNG command example
Command Response Description
Step 1: Import a trusted root certificate using the stream of byte similar to +UDWNFILE
AT+USECMNG=0,0,"ThawteCA",
1516
> Start the data transfer using the stream of
byte.
PEM encoded trusted root
certificate data.
+USECMNG: 1,0,"ThawteCA","8ccadc0
b22cef5be72ac411a11a8d812"
OK
Input PEM formatted trusted root
certificate data bytes. Output MD5 hash
string of the stored trusted root certificate
DER.
Step 2: List all available certificates and private keys
AT+USECMNG=3 CA, "ThawteCA","thawte Primary Root CA",
"2036/07/17"
OK
List all available certificates and private
keys.
Step 3: Set the security profile 2 validation level to trusted root
AT+USECPRF=2,0,1 OK Security profile 2 has the validation level
set to trusted root.
Step 4: Set the security profile 2 trusted root certificate to the CA certificate imported as "ThawteCA"
AT+USECPRF=2,3,"ThawteCA" OK Security profile 2 will use the CA certificate
imported as "ThawteCA" for server
certificate validation.
Step 5: Use the configured USECMNG profile 2 with the UHTTP application
AT+UHTTP=0,1,"www.ssl_tls_
test_server.com"
OK Configure the UHTTP server name.
AT+UHTTP=0,6,1,2 OK Enable the SSL/TLS for the UHTTP profile
#0 and specify the SSL/TLS security
profile 2.
AT+UHTTPC=0,1,"/","https.resp" OK Execute the HTTP GET command.
+UUHTTPCR: 0,1,1 HTTP GET URC response.