Help Center> ROMA Connect> User Guide> Service Integration Guide> API Management> SSL Certificate Management
View PDF

SSL Certificate Management

Overview

If the API group contains HTTPS-compatible APIs, add an SSL certificate for the independent domain name bound to the group.

Prerequisites

  • Only SSL certificates in PEM format can be added.
  • The added SSL certificates support only the RSA, ECDSA, and DSA encryption algorithms.

Creating an SSL Certificate

  1. Log in to the ROMA Connect console. On the Instances page, click View Console next to a specific instance.
  2. In the navigation pane on the left, choose API Connect > API Management. On the SSL Certificate Management tab page, click Create SSL Certificate.
  3. In the displayed dialog box, configure the SSL certificate information.
    Table 1 SSL certificate configuration

    Parameter

    Description

    Name

    Enter an SSL certificate name. Specify the certificate name based on certain naming rules for easy identification and quick retrieval.

    Content

    Enter the SSL certificate content in PEM format.

    Open the PEM certificate file in the certificate to be added in text mode, and copy the certificate content to Content.

    If the certificate is not in PEM encoding format, convert the format by referring to Converting the Certificate Format to PEM.

    Key

    Enter the SSL certificate key in PEM format.

    Open the private key file in KEY/PEM format in the certificate to be uploaded in text mode, and copy the private key to Key.
  4. Click OK. The SSL certificate is added.

Converting the Certificate Format to PEM

Format

Converting with OpenSSL

CER/CRT

Rename the certificate file cert.crt to cert.pem directly.

PFX
  • Obtain a private key. For example, run the following command to convert cert.pfx into key.pem:

    openssl pkcs12 -in cert.pfx -nocerts -out key.pem

  • Obtain a certificate. For example, run the following command to convert cert.pfx into cert.pem:

    openssl pkcs12 -in cert.pfx -nokeys -out cert.pem

P7B
  1. Convert a certificate. For example, run the following command to convert cert.p7b into cert.cer:

    openssl pkcs7 -print_certs -in cert.p7b -out cert.cer

  2. Rename the certificate file cert.cer to cert.pem.

DER
  • Obtain a private key. For example, run the following command to convert privatekey.der into privatekey.pem:

    openssl rsa -inform DER -outform PEM -in privatekey.der -out privatekey.pem

  • Obtain a certificate. For example, run the following command to convert cert.cer into cert.pem:

    openssl x509 -inform der -in cert.cer -out cert.pem
Parent topic: API Management