Integration Manual

Table Of Contents
TOBY-L2 and MPCI-L2 series - System Integration Manual
UBX-13004618 - R26 System description
Page 62 of 162
1.15.8 HTTP
Embedded HTTP services are not supported by “00” and “60” product versions.
TOBY-L2 and MPCI-L2 series modules provide the embedded Hyper-Text Transfer Protocol (HTTP) services via AT
commands for sending requests to a remote HTTP server, receiving the server response and transparently storing
it in the module’s Flash File System (FFS).
For more details about embedded HTTP functionalities see the u-blox AT Commands Manual [3].
1.15.9 SSL / TLS
Embedded Secure Sockets Layer (SSL) / Transport Layer Security (TLS) protocols are not supported by the
“00”, “01”, “60”, TOBY-L201-02S and MPCI-L201-02S product versions.
TOBY-L2 and MPCI-L2 series modules support the Secure Sockets Layer (SSL) / Transport Layer Security (TLS) with
certificate key sizes up to 4096 bits to provide security over the FTP and HTTP protocols.
The SSL/TLS support provides different connection security aspects:
Server authentication: use of the server certificate verification against a specific trusted certificate or a trusted
certificates list
Client authentication: use of the client certificate and the corresponding private key
Data security and integrity: data encryption and Hash Message Authentication Code (HMAC) generation
The security aspects used during a connection depend on the SSL/TLS configuration and features supported.
Table 14 contains the settings of the default SSL/TLS profile and Table 15 to Table 19 report the main SSL/TLS
supported capabilities of the products. For a complete list of supported configurations and settings see the u-blox
AT Commands Manual [3].
Settings
Value
Meaning
Certificates validation level
Level 0
The server certificate will not be checked or verified
Minimum SSL/TLS version
Any
The server can use any of the TLS1.0/TLS1.1/TLS1.2 versions for the
connection
Cipher suite
Automatic
The cipher suite will be negotiated in the handshake process
Trusted root certificate internal name
None
No certificate will be used for the server authentication
Expected server host-name
None
No server host-name is expected
Client certificate internal name
None
No client certificate will be used
Client private key internal name
None
No client private key will be used
Client private key password
None
No client private key password will be used
Pre-shared key
None
No pre-shared key password will be used
Table 14: Default SSL/TLS profile
SSL/TLS Version
SSL 2.0
NO
SSL 3.0
YES
TLS 1.0
YES
TLS 1.1
YES
TLS 1.2
YES
Table 15: SSL/TLS version support
Algorithm
RSA
YES