V5.51: SSL/TLS Support (https://)

V5.51: SSL/TLS Support (https://) SearchSearch
Author Message
Bryce Norwood - NowSMS Support
Board Administrator
Username: Bryce

Post Number: 3315
Registered: 10-2002
Posted on Friday, August 20, 2004 - 03:18 pm:   

SSL/TLS (https://) support is now available for the following functions:
  • SMS Gateway Web Interface - The web interface for the SMS gateway component can be configured to accept SSL/TLS connections. The port number that the server will listen to for SSL/TLS connections is specified on the "Web" page of the configuration dialog. Note that this option is not available until a "Server Certificate" is generated on the SSL/TLS page of the configuration dialog. If you want to require SSL/TLS connections, two options are available: a.) Configure a port number for the "SSL port number for web interface", but leave the "Port number for web interface" blank. b.) Configure port numbers for both the "SSL port number" and standard "Port number" settings, but check "SSL Redirect only". The "SSL Redirect only" setting will redirect any requests to the standard port to use SSL/TLS instead. (Note: The default port for https:// servers is 443. If you want to be able to connect to the web interface without specfying a port number in the URL, specify an SSL port number of 443.)
  • SMPP Server Interface - The SMTP server component can accept SMPP over SSL/TLS connections. On the "Web" page of the configuration dialog, there are two port number settings: "Port number for SMPP Server" and "SSL port number for SMPP Server". The SMPP server can be configured to accept SMPP connections on either or both of these ports.
  • HTTP SMSC Interface - When connecting to an HTTP-based SMSC, NowSMS can now use SSL/TLS. There is a checkbox for specifying that SSL/TLS should be used in the dialog where HTTP SMSC connections are defined. If you are connecting to an https:// URL that does not include a port number, specify 443 as the port number.
  • SMPP SMSC Interface - When connecting to an SMPP-based SMSC (such as another NowSMS server), NowSMS can now use SMPP over SSL/TLS. There is a checkbox for specifying that SSL/TLS should be used in the dialog where SMPP SMSC connections are defined.
  • MMSC HTTP Interface (used for MM1, MM7 and EAIF submissions) - An additional setting is defined on the "MMSC" page of the configuration dialog for specifying the HTTPS port number for the MMSC. The MMSC will accept MM1 client connections, or MM7/MM1/EAIF VASP connections on this port. Please note that it is not possible to force MM1 or EAIF connections to use SSL/TLS. A setting is provided to require that MM7 VASP connections use SSL/TLS to connect. This setting is available on the "MMSC VASP" page of the configuration dialog. (Note: This option is not available until a "Server Certificate" is generated on the SSL/TLS page of the configuration dialog.)
  • MMSC Routing Interface - When defining a connection to an external MMSC using EAIF or MM7, it is possible to specify an https:// based URL in the "Server Address" field.
Note: Some functions (specifically the SMS Gateway Web Interface and the MMSC HTTP Interface) require an SSL Server Certificate before they can function properly. In SSL environments, server certificates are used to identify the server and to validate that the individual or organisation operating the server is who they claim to be. The "Generate Server Certificate" option on the "SSL/TLS" page of the NowSMS configuration dialog allows you to build a self-signed certificate. This will allow you to accept HTTPS connections, however web browsers will display a warning message when a user first connects to your site. To remove this warning, you must have your certificate signed by a recognised Certificate Authority (CA). A CA verifies that the identity claimed on your certificate is valid, which in theory helps prevent another party from masquerading with your server's identity. For more information on Certificate Authorities, please visit http://www.sslreview.com. The following file names are used by NowSMS for SSL related keys and certificates: SSL.KEY - Server Private Key; SSL.CRT - Self-signed server certificate; SSL.CSR - Certificate Signing Request (CSR) that can be submitted to a CA; SSL.CA - The file name that should be used to store a certificate returned by a CA.}

More information on NowSMS v5.51 can be found at the following links:

Release highlights: http://www.nowsms.com/newsletter/20040823.htm
Detail of changes: http://support.nowsms.com/discus/messages/53/5898.html
Download (available 23-Aug-2004): http://www.nowsms.com/downloads/smsmmsgateway.htm