Can I specify the SSL certificates used by CDRouter's firmware download server?
In some cases, CDRouter’s ACS may create a second HTTPS server which is used for the OD-128 HTTPS firmware download tests (OD128 Tests 8 .3 and 8.4).
The server certificate used by CDRouter’s download server can be
configured using the testvar acsDownloadCertPath
which defaults to the included server certificate
acs-download.cdroutertest.com.pem:
testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem
The intermediate CA can also be specified for the download server
using the testvar acsDownloadCaCertPath:
testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem
CDRouter will utilize this new server certificate in certain cases only. In cases where the CWMP session transport (HTTP or HTTPS) is the same as the transport for the firmware download test being performed, the ACS is used as the download server. In cases where the CWMP session and firmware download test transport differ, a second download server will be automatically created.
OD-128 Firmware Download Server Functionality
The following table outlines the behavior of CDRouter when running the OD-128 firmware download tests (Test Cases 8.1 through 8.4):
| CWMP Session Transport | HTTP Firmware Download | HTTPS Firmware Download |
|---|---|---|
| HTTP | ACS acts as the download server | A new HTTPS server is created |
| HTTPS | A new HTTP server is created | ACS acts as the download server |
When CDRouter creates a new server an arbitrary IP address from the free network range defined by the following testvars will be used:
# -- Free network addresses to use during the test
testvar FreeNetworkStart 192.168.201.0
testvar FreeNetworkMask 255.255.255.0
testvar FreeNetworkStop 193.0.0.0
Note that CDRouter will also automatically add a DNS entry for the common name on the server certificate whenever a HTTPS server is created.
