Upload SSL Certificate

Method:              POST URI:                      /ALF/SSL/UploadCert?filename={certName}&format={format} This method uploads a SSL Certificate. It requires the following information: Field Required data filename The file name of the certificate. E.G. mycert.crt format The format of the file. “PEM” or “DER” Both fields are […]

Remove a Link/Chain to an Intermediate Certificate

Method:              PUT URI:                      /ALF/SSL/CertificateKeyPair/Unlink This method links your own cert/key pair with an intermediate certificate to create trust. Field Required data Id The ID of your own Cert/Key pair All fields are required

Create a Link/Chain to an Intermediate Certificate

Method:              PUT URI:                      /ALF/SSL/CertificateKeyPair/Link This method links your own cert/key pair with an intermediate certificate to create trust.   Field Required data Id The ID of your own Cert/Key pair LinkedCertificateId The ID of the Intermediate SSL Certificate IgnoreTestLink […]

Retrieve All Intermediate Certificates for Linking/Chaining

Method:              GET URI:                      /ALF/SSL/IntermediateCert/All?{options} This method will retrieve all of the Intermediate SSL Certificates in our store that are available for linking/chaining to your own certificates to create trust. The {options} allow you to refine the results retrieved from […]

SSL Error: Could not create certificate-key pair

If you’re attempting to create a certificate key-pair and have received the message shown below, there is usually one common remedy: The remedy is to run your key through OpenSSL using the RSA key processing tool to change it to the traditional SSLeay compatible format. And yes, to immediately answer our critics: we do support […]

Do you support SAN (Subject Alternative Name) extension SSL Certificates?

Yes, we absolutely do, and always have. Before we supported SNI, we recommended that clients with multiple domains on a single IP address use a SAN (Subject Alternative Name) extension certificate. To use one of these, simply attach it as a standard SSL certificate (that is, do not check the SNI box when attaching it). […]

Do you support SNI (Server Name Indication) SSL Certificates?

Yes, we sure do. This fairly recent extension of the TLS protocol allows you to indicate which hostname is being contacted by the browser at the beginning of the handshake process. This allows a server to connect multiple SSL Certificates to one IP address and load the correct site or application for the user. Previously […]

Do you support FREE SSL Certificates from Let’s Encrypt?

Yes, absolutely. There are no issues using their SSL certificates on our platform for Load Balancing or the Web Application Firewall. In fact, we already have the Let’s Encrypt Authority Intermediate certificate loaded into our repository and ready for your use.  You can upload certificates manually through our UI, or you can automate/script the entire […]

I want to install the SSL certificate on the Load Balancer and use the SSL protocol, but I don’t want SSL Offload. I want it to remain entirely encrypted between my client and my server. Is this possible?

Yes, this is absolutely possible, and recommended! To accomplish this, you will need to configure the “protocol” as SSL and map it also to SSL on your servers (both probably on port 443). This ensures SSL is maintained between the client and your servers, while still allowing you to take advantage of our SSL acceleration, […]