qacafe - ip test solutions
Knowledge Base > TR-069 > Can I specify the SSL certificates used by CDRouter's firmware download server?

Can I specify the SSL certificates used by CDRouter's firmware download server?

In some cases, CDRouter's ACS may create a second HTTPS server which is used for the PD-128 HTTPS firmware download tests (PD128 Tests 8.3 and 8.4). Beginning with CDRouter 4.2, the SSL certificate used by CDRouter's download server can be configured using the testvars acsDownloadCertPath and acsDownloadCaCertPath. The testvar acsDownloadCertPath defaults to the new certificate included with CDRouter 4.2 and later releases acs-download.qacafe.com.pem.

  testvar acsDownloadCertPath /usr/share/doc/cdrouter/acs-download.qacafe.com.pem

CDRouter will utilize this new server certificate in certain cases only. In cases where the CWMP session transport (HTTP or HTTPS) is the same as the transport for the firmware download test being performed, the ACS is used as the download server. In cases where the CWMP session and firmware download test transport differ, a second download server will be automatically created.

PD-128 Firmware Download Server Functionality

The following table outlines the behavior of CDRouter when running the PD-128 firmware download tests (Test Cases 8.1 through 8.4):

Firmware Download Transport (HTTP) Firmware Download Transport (HTTPS)
CWMP Session Transport (HTTP) ACS acts as the download server A new HTTPS server is created
CWMP Session Transport (HTTPS) A new HTTP server is created ACS acts as the download server

When CDRouter creates a new server an arbitrary IP address from the free network range defined by the following testvars will be used:

  # -- Free network addresses to use during the test

  testvar FreeNetworkStart      192.168.201.0
  testvar FreeNetworkMask       255.255.255.0
  testvar FreeNetworkStop       193.0.0.0

Note that CDRouter will also automatically add a DNS entry for the common name on the server certificate whenever a HTTPS server is created.