backend type = domain name/IP and protocol = HTTPS.Parameter | Required | Value Range/Default Value | Description |
Certificate Name | Yes | 1-80 characters, supporting Chinese, English, digits, underscores, hyphens ("-"), and periods. | Custom name. |
Certificate Source | Yes | Tencent Cloud SSL Certificates Management Platform | Fixed item. Click to go to the SSL platform. |
Certificate Type | Yes | SVR (Server Certificate) / CA (CA Certificate) | Server certificates are used to bind domains and provide HTTPS access. CA certificates are used to verify backend service certificates (mTLS). The certificate type must match the actual type on the SSL platform; otherwise, an error is reported. |
Certificate Usage | No, default to "Server". | SERVER (Server Domain Certificate) / CLIENT (mTLS Client Certificate) | Selectable only when Certificate Type=SVR. The CLIENT purpose requires gateway version 3.9.6 or later and does not support domain binding. |
Select Certificate | Yes | Existing certificates on the SSL platform | Search by ID/remarks/domain is supported. Expired certificates cannot be selected. |
Bind Domain | No | - | Required only for the SERVER purpose. |
Parameter | Required | Value Range/Default Value | Description |
Verify Certificate or Not | No, verification disabled by default. | Enable/Disable | When this option is disabled, the behavior is the same as the current default (no verification, compatible with self-signed certificates). |
Client Certificate | No | Associated certificates with Certificate Type=SVR + Certificate Purpose=CLIENT | After configuration, mTLS mutual authentication is enabled. Certificate verification must be enabled. |
Trusted CA Certificate | No | Associated certificates with Certificate Type=CA, up to 8 | When configuring a client certificate, configure at least one trusted CA certificate at the same time. |
Was this page helpful?
You can also Contact sales or Submit a Ticket for help.
Help us improve! Rate your documentation experience in 5 mins.
Feedback