[Referer] Tab - Sony REA-C1000 Operating Instructions Manual

• SSL connection may not be possible depending on the
type of certificate installed in the unit.
To import a certificate
Click the [Browse] button at the bottom right of the
setup screen and select the certificate. Click the [OK]
button in the file selection dialog to import the selected
file into the unit.
Notes
• The import process is invalid if the selected file is not
a certificate or if the format of the imported certificate
is not allowed.
• In software version 2.00 and later, the following
insecure certificates are disabled.
– Certificates with a private key of 1024 bits or
smaller
– Certificates that use a weak algorithm, such as
MD5/SHA1
To generate a self-signed certificate
A self-signed certificate must be generated when [Use a
self-signed certificate (For test use)] is selected in
[Certificate Options].
Click the [Generate] button to generate a self-signed
certificate in the unit.
Clicking the [Generate] button again after generating a
self-signed certificate will update the self-signed
certificate stored in the unit.
Notes
• Make sure to set the date and time on the unit before
performing this operation. If the date and time are not
set correctly, it may not be possible to connect to the
unit using a web browser.
• Before clicking the [Generate] button to generate a
self-signed certificate, select [Use a self-signed
certificate (For test use)] in [Certificate Options] and
click the [OK] button.
To display the certificate contents
When the certificate has been configured in the unit
correctly, information from the certificate appears in
[Status], [Issuer DN], [Subject DN], [Available Period],
and [Extended Key Usage].
[Status]
Displays whether the status of the certificate is valid or
invalid. The following status types are displayed.
[Valid]: The certificate is correctly stored and
configured.
[Invalid]: The certificate is not correctly stored and
configured. If invalid, possible causes are as follows:
• [Use an external certificate] is selected but the
private key password included in the certificate is
not specified correctly.
• [Use an external certificate] is selected but the
private key included in the certificate is not
encrypted. Or the private key password is specified
but is not encrypted.
• [Use an external certificate] is selected but the
required private key is not included in the
certificate.
• [Use a self-signed certificate (For test use)] is
selected but a self-signed certificate has not been
generated.
Note
When the certificate to be imported is in PKCS#12
format and the private key password is not specified
correctly, "<Put correct private key password>" is
displayed in the [Issuer DN], [Subject DN], [Available
Period], and [Extended Key Usage] fields. Specify the
correct private key password.
To delete the imported certificate or self-signed
certificate
Click the [Delete] button on the setup screen to delete
the imported certificate or self-signed certificate.
To specify the private key password
Enter a password comprising up to 50 characters for the
private key included in the certificate in [Private Key
Password]. Entry is supported only when [Certificate
Options] is set to [Use an external certificate].
Leave the field for this parameter blank if the private key
included in the certificate is not encrypted.
To enter the private key password, click the [Reset]
button and enter a password.
Note
Click the [Cancel] button at the bottom of the screen if
you want to cancel changing the private key password
after clicking the [Reset] button. Note that clicking the
[Cancel] button also restores all other setting items on
the [SSL] tab to the previous settings.

[Referer] tab

Use the [Referer] tab to configure the Referer check
function. "Referer Check" is a function that checks
whether the web page which requested the access is
legitimate when the unit is accessed from an external
source. If the web page cannot be confirmed as
legitimate, access is denied.
If you want to access the unit from a web page other than
one that the unit provides, register the host name and
port number that hosts the web page on this tab.
20