User's Manual

Table Of Contents
Nonvolatile Parameter Database
AT+i Programmer‘s Manual Version 8.32 34-130
34.16.2 +iCA Define SSL3/TLS Certificate Authority
Syntax:
AT+iCA[n]=tca
Sets the certificates of the trusted certificate authorities. This
authority is the one eligible to sign a server‘s certificate. iChip
accepts a server‘s identity only if its certificate is signed by one
of these authorities.
Parameters:
tca = PEM format DER-encoded X509 certificate
Command Options:
tca =<CR><CR>
Empty: No trusted certificate authority.
tca =<cert>
Optional n:
cert is referenced as the trusted certificate authority‘s certificate
during SSL3/TLS1 socket connection establishment
(handshake). iChip establishes an SSL3/TLS1 socket
connection only to servers having a certificate authenticated by
this certificate authority.
iChip expects cert to be multiple lines separated by <CR>,
beginning with
-----BEGIN CERTIFICATE-----
and terminating with
-----END CERTIFICATE-----.
Maximum size of cert is 1300 characters.
n is optional and may be 2, 3 or 4. Use n to specify alternative
CA certificates (CA2, CA3 and CA4). When more than one CA
certificates exist, iChip will check all its CA‘s when verifying a
Server certificate.
Default:
Empty. No trusted Certificate Authority defined.
Result code:
I/OK
If tca is an empty or legal certificate.
I/ERROR
Otherwise
AT+iCA?
Report the current trusted certificate contents. The reported
value displays the Certificate Authority name, certificate
validity date range, and the entire PEM contents. If the trusted
certificate is empty, only <CRLF> is returned. The reply is
followed by I/OK.
AT+iCA=?
Returns the message ‗String‘ followed by I/OK.
Sample PEM format DER-encoded X509 certificate:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----