Domain Certificate Management

Background

This topic describes how to set an HTTPS certificate of domain names and deploy the HTTPS configuration on all CDN PoPs to implement secure acceleration.

• HTTP

  HTTP transfers content in plaintext without any data encryption. If an attacker intercepts packets transmitted between browsers and website servers, the transmitted content can be read directly.

• HTTPS

  Based on HTTP, HTTPS uses Secure Sockets Layer (SSL) to encrypt data transmission. With SSL, servers are authenticated using certificates, and communications between browsers and servers are encrypted.

Scenarios

• If you have a certificate, you can directly upload it. You can also view and delete existing certificates.
• You can update certificates in batches. The new certificates will overwrite the original ones.
• You can buy certificates on CCM.

Configuring a Certificate

1. Log in to Huawei Cloud console. Choose Service List > Content Delivery & Edge Computing > Content Delivery Network.

   The CDN console is displayed.

2. In the navigation pane, choose Certificates.
3. Click Configure Certificate in the upper left corner.
   Figure 1 Configuring a certificate
   
4. Set related parameters.

   Table 1 Parameters of an international certificate

   Parameter	Description
   Certificate Standard	International
   Certificate Source	Either My certificate or SCM certificate
   Certificate Name	If you select My certificate, enter the certificate name. A certificate name can be up to 32 characters long. If you select SCM certificate, CDN automatically obtains SSL certificates uploaded to the CCM console. You only need to select the desired one from the drop-down list.
   Certificate Body	If you select My certificate, use a local text editor to open the certificate and copy the certificate content to the text box. For details about the certificate format, see HTTPS Certificate Requirements. If you select SCM certificate, the content is automatically filled in. NOTE: The certificate body cannot contain spaces or blank lines. Otherwise, a message is displayed indicating that certificate parameters are incorrect.
   Private Key	If you select My certificate, use a local text editor to open the private key and copy the content to the text box. For details about private key format requirements, see RSA Private Key. If you select SCM certificate, the content is automatically filled in.

5. Click Next to associate the certificate with your domain names.

   

6. Select the domain names to be associated on the left, click to add them to the right, and click Next.
   

   • If a selected domain name already uses a certificate, this operation will replace the existing certificate.
   • You can search for domain names by HTTPS status.
   • You can select up to 50 domain names.
7. Click Finish to implement HTTPS secure acceleration for the associated domain names.