+CSSLCFG: “sslversion”,(0-5),(0-5)

+CSSLCFG:

“ciphersuite”,(0-5),(0-7),(0x008A,0x008B,0x008C,0x008D,0x00A8,0x00

A9,0x00AE,0x00AF,0x002F,0x0033,0x0035,0x0039,0xC02A,0xC02B,0x

C02C,0xC02D,0xC02E,0xC02F,0xC030,0xC031,0xC032,0xC09C,0xC09

D,0xC09E,0xC09F,0xC0A0,0xC09F,0xC0A1,0xC0A2,0xC0A3,0xCC13,0x CC14,0xCC15)

+CSSLCFG: “ignorertctime”,(0-5),(0-1)

+CSSLCFG: “protocol”,(0-5),(1-2)

+CSSLCFG: “sni”,(0-5),<servername>

+CSSLCFG: “ctxindex”,(0-5)

+CSSLCFG: “convert”,(1-3),(<cname>,[<keyname>[,<passkey>]])

OK

Parameters

See Write Command

Parameters

See Write Command

OK

If failed:

+CME ERROR: <err>

Parameters

<ctxindex>     (0-5)

<sslversion>

0     QAPI_NET_SSL_PROTOCOL_UNKNOWN

1     QAPI_NET_SSL_PROTOCOL_TLS_1_0

2     QAPI_NET_SSL_PROTOCOL_TLS_1_1

3     QAPI_NET_SSL_PROTOCOL_TLS_1_2

4     QAPI_NET_SSL_PROTOCOL_DTLS_1_0

5     QAPI_NET_SSL_PROTOCOL_DTLS_1_2

OK

If failed:

+CME ERROR: <err>

Parameters

<ctxindex>     (0-5)

<cipher_index>     (0-7)

<ciphersuite>

0x008A     QAPI_NET_TLS_PSK_WITH_RC4_128_SHA

0x008B     QAPI_NET_TLS_PSK_WITH_3DES_EDE_CBC_SHA

0x008C     QAPI_NET_TLS_PSK_WITH_AES_128_CBC_SHA

0x008D     QAPI_NET_TLS_PSK_WITH_AES_256_CBC_SHA

0x00A8     QAPI_NET_TLS_PSK_WITH_AES_128_GCM_SHA256

0x00A9     QAPI_NET_TLS_PSK_WITH_AES_256_GCM_SHA384

0x00AE     QAPI_NET_TLS_PSK_WITH_AES_128_CBC_SHA256

0x00AF     QAPI_NET_TLS_PSK_WITH_AES_256_CBC_SHA384

0x002F     QAPI_NET_TLS_RSA_WITH_AES_128_CBC_SHA

0x0033     QAPI_NET_TLS_DHE_RSA_WITH_AES_128_CBC_SHA

0x0035     QAPI_NET_TLS_RSA_WITH_AES_256_CBC_SHA

0x0039     QAPI_NET_TLS_DHE_RSA_WITH_AES_256_CBC_SHA

0x003C     QAPI_NET_TLS_RSA_WITH_AES_128_CBC_SHA256

0x003D     QAPI_NET_TLS_RSA_WITH_AES_256_CBC_SHA256

0x0067     QAPI_NET_TLS_DHE_RSA_WITH_AES_128_CBC_SHA256

0x006B     QAPI_NET_TLS_DHE_RSA_WITH_AES_256_CBC_SHA256

0x009C     QAPI_NET_TLS_RSA_WITH_AES_128_GCM_SHA256

0x009D     QAPI_NET_TLS_RSA_WITH_AES_256_GCM_SHA384

0x009E     QAPI_NET_TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

0x009F     QAPI_NET_TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

0xC004     QAPI_NET_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA

0xC005     QAPI_NET_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA

0xC009     QAPI_NET_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

0xC00A     QAPI_NET_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

0xC00E     QAPI_NET_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA

0xC00F     QAPI_NET_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA

0xC013     QAPI_NET_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

0xC014     QAPI_NET_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

0xC023     QAPI_NET_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

0xC024     QAPI_NET_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

0xC025     QAPI_NET_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256

0xC026     QAPI_NET_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384

0xC027     QAPI_NET_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

0xC028     QAPI_NET_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

0xC029     QAPI_NET_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256

0xC02A     QAPI_NET_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384

0xC02B     QAPI_NET_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

0xC02C     QAPI_NET_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

0xC02D     QAPI_NET_TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256

0xC02E     QAPI_NET_TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384

0xC02F     QAPI_NET_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

0xC030     QAPI_NET_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

0xC031     QAPI_NET_TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256

0xC032     QAPI_NET_TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384

0xC09C     QAPI_NET_TLS_RSA_WITH_AES_128_CCM

0xC09D     QAPI_NET_TLS_RSA_WITH_AES_256_CCM

0xC09E     QAPI_NET_TLS_DHE_RSA_WITH_AES_128_CCM

0xC09F     QAPI_NET_TLS_DHE_RSA_WITH_AES_256_CCM

0xC0A0     QAPI_NET_TLS_RSA_WITH_AES_128_CCM_8

0xC0A1     QAPI_NET_TLS_RSA_WITH_AES_256_CCM_8

0xC0A2     QAPI_NET_TLS_DHE_RSA_WITH_AES_128_CCM_8

0xC0A3     QAPI_NET_TLS_DHE_RSA_WITH_AES_256_CCM_8

0xCC13     QAPI_NET_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA25 6

0xCC14     QAPI_NET_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA 256

0xCC15     QAPI_NET_TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256

AT+CSSLCFG=”ignorertctime”,<ctxindex>,

<ignorertctime>

OK

If failed:

+CME ERROR: <err>

Parameters

<ctxindex>     (0-5)

<ignorertctime>

0     Do not ignore the RTC time

1     Ignore the RTC time

AT+CSSLCFG=”protocol”,<ctxindex>,

<protocol>

OK

If failed:

+CME ERROR: <err>

Parameters

<ctxindex>     (0-5)

<protocol>

1     QAPI_NET_SSL_TLS_E

2     QAPI_NET_SSL_DTLS_E

+CSSLCFG:

<ctxindex>,<sslversion>,<ciphersuite>,<ignorertctime>,<protocol>,<sni>

OK

If failed:

+CME ERROR: <err>

Parameters

See other commands

AT+CSSLCFG=”convert”,<ssltype>,<cname>[,

<keyname>[,<passkey>]]

OK

If failed:

+CME ERROR: <err>

Parameters

<ssltype>

1     QAPI_NET_SSL_CERTIFICATE_E

2     QAPI_NET_SSL_CA_LIST_E

3     QAPI_NET_SSL_PSK_TABLE_E

<cname>    String type (string should be included in quotation marks): name of cert file

<keyname>    String type (string should be included in quotation marks):name of key file

<passkey>    String type (string should be included in quotation marks):value of passkey

OK

If failed:

+CME ERROR: <err>

Parameters

<ctxindex>     (0-5)

<servername>

String type.

Server Name Indication.

SNI addresses this issue by having the client send the name of the virtual domain as part of the

TLS negotiation.