Domain Certificate Management

Background

This topic describes how to set an HTTPS certificate of domain names and deploy the HTTPS configuration on all CDN PoPs to implement secure acceleration.

• HTTP

  HTTP transfers content in plaintext without any data encryption. If an attacker intercepts packets transmitted between browsers and website servers, the transmitted content can be read directly.

• HTTPS

  Based on HTTP, HTTPS uses Secure Sockets Layer (SSL) to encrypt data transmission. With SSL, servers are authenticated using certificates, and communications between browsers and servers are encrypted.

Scenarios

• If you have a certificate, you can directly upload it. You can also view and delete existing certificates.
• You can update certificates in batches. The new certificates will overwrite the original ones.
• You can buy certificates on CCM.

Configuring a Certificate

1. Log in to Huawei Cloud console. Choose Service List > Content Delivery & Edge Computing > Content Delivery Network.

   The CDN console is displayed.

2. In the navigation pane, choose Certificates.
3. Click Configure Certificate in the upper left corner.
   Figure 1 Configuring a certificate
   
4. Set related parameters.

   Table 1 Parameters of an international certificate

   Parameter	Description
   Certificate Standard	International
   Certificate Source	Either My certificate or SCM certificate
   Certificate Name	If you select My certificate, enter the certificate name. A certificate name can be up to 32 characters long. If you select SCM certificate, CDN automatically obtains SSL certificates uploaded to the CCM console. You only need to select the desired one from the drop-down list.
   Certificate Body	If you select My certificate, use a local text editor to open the certificate and copy the certificate content to the text box. For details about the certificate format, see HTTPS Certificate Requirements. If you select SCM certificate, the content is automatically filled in. NOTE: The certificate body cannot contain spaces or blank lines. Otherwise, a message is displayed indicating that certificate parameters are incorrect.
   Private Key	If you select My certificate, use a local text editor to open the private key and copy the content to the text box. For details about private key format requirements, see RSA Private Key. If you select SCM certificate, the content is automatically filled in.

   Table 2 Parameters of a Chinese SM series cryptographic certificate

   Parameter	Description
   Certificate Standard	Chinese (SM2)
   Certificate Source	Either My certificate or SCM certificate
   Certificate Name	If you select My certificate, enter the certificate name containing 3 to 64 characters. If you select SCM certificate, CDN automatically obtains SSL certificates uploaded to the CCM console. You only need to select the desired one from the drop-down list.
   Signature Certificate	Open the PEM file in the signature certificate to be uploaded as a text file and copy the certificate content in the file to this text box. Note that you need to upload a combined certificate file that contains both the server certificate content and certificate chain content into this field. The content of the certificate chain should be pasted right below the content of the server certificate.
   Signature Private Key	Open the KEY file in the signature certificate to be uploaded as a text file and copy the private key in the file to this text box.
   Encryption Certificate	Open the PEM file in the encryption certificate to be uploaded as a text file and copy the certificate content in the file to this text box. You do not need to upload the certificate chain here.
   Encryption Private Key	Open the KEY file in the encryption certificate to be uploaded as a text file and copy the private key in the file to this text box.

5. Click Next to associate the certificate with your domain names.

   

6. Select the domain names to be associated on the left and click Next.
   

   • If a selected domain name already uses a certificate, this operation will replace the existing certificate.
   • You can search for domain names by HTTPS status.
   • You can select up to 50 domain names.
7. Click Finish to implement HTTPS secure acceleration for the associated domain names.

Deleting a Managed Certificate

• Deleting a certificate will remove it from the server but will not delete any data associated with the certificate.
• Disable HTTPS before deleting a certificate associated with your domain name.
• To use the certificate again, re-push it from SCM to CDN.

Procedure

1. Click Delete Huawei-managed Certificate.
2. On the displayed drawer, select the certificates to be deleted and click OK.
   

   To use the certificate again, re-push it from SCM to CDN.