Skip to main content

Security Requirements

This article provides a summary of the security requirements necessary when using any of the Fire Station+ products (such as the Department Hub).

Domains and IP Addresses

The following domains used by Fire Station+

  • hub.firestationsoftware.com
  • id.firestationsoftware.com
  • apparatus-checks.platform.firestationsoftware.com
  • field-reports.firestationsoftware.com

The following IP addresses are used by Fire Station+

  • 159.89.244.89
  • 45.55.64.197
  • 45.55.69.140
  • 45.55.66.17
  • 159.203.150.119
  • 159.65.33.78

This list is subject to change.

Certificate Trust

Fire Station+ uses HTTPS to encrypt data sent over the internet. The SSL certificate used to establish a trusted connection is distributed by Let's Encrypt. Your computer must include the ISRG Root X1 certificate as a trusted root CA certificate. This should be included automatically, under most circumstances.

If you need to install this certificate, it can be downloaded using the following link:

https://letsencrypt.org/certs/isrgrootx1.pem

The SHA-1 fingerprint of this certificate is: 

CA:BD:2A:79:A1:07:6A:31:F2:1D:25:36:35:CB:03:9D:43:29:A5:E8

If this certificate is not trusted you may see an error stating that "The SSL Connection could not be established".

1-error.png

 

TLS/HTTPS Requirements

Fire Station+ is compatible with TLS 1.2 or TLS 1.3 and supports the following ciphers.

  • ECDHE-ECDSA-AES128-GCM-SHA256
  • ECDHE-RSA-AES128-GCM-SHA256
  • ECDHE-ECDSA-AES256-GCM-SHA384
  • ECDHE-RSA-AES256-GCM-SHA384
  • ECDHE-ECDSA-CHACHA20-POLY1305
  • ECDHE-RSA-CHACHA20-POLY1305
  • DHE-RSA-AES128-GCM-SHA256
  • DHE-RSA-AES256-GCM-SHA384
  • ECDHE-RSA-AES256-SHA384
Back to top