Feature Overview

When HTTP is used, data is transmitted in plaintext and not encrypted. HTTPS provides secure HTTP channels and is the secure version of HTTP. It uses SSL/TLS to encapsulate HTTP request data. The SSL/TLS protocol provides the security capability of HTTPS.

You can enable HTTPS in the eSurfing Cloud CDN console to enable secure and encrypted data transmission between clients and eSurfing Cloud CDN points of presence (POPs). If you want to enable end-to-end transmission over HTTPS, you must configure HTTPS as the protocol for back-to-origin requests, and your origin server must support HTTPS.

Basic process of an HTTPS request:

A client sends an HTTPS request to a CDN POP.
The CDN POP returns the public key of the SSL certificate that is bound to the corresponding accelerated domain name to the client.
The client verifies the public key. If the public key is correct, the client generates a secret key, encrypts the secret key with the public key, and then sends the encrypted secret key to the CDN POP.
The CDN POP uses the corresponding private key to decrypt the encrypted secret key received to obtain the secret key.
The CDN POP uses the secret key to encrypt the data to be transmitted.
The client uses the secret key to decrypt the encrypted data received from the CDN POP to obtain the data.

Procedure

Log in to the CDN console.
Go to Domain Management -> Domain List.
On the Domain List page, find the target domain name, and click Edit in the Actions column.
Click HTTPS .
Turn on the HTTPS switch.
Select a valid HTTPS certificate that is bound to the domain name, if no valid certificate found in the drop-down list, please go to Click to upload to upload your certificate first.
Click save and submit.

Parameter		Description
HTTPS		Disable: disable HTTPS. Enable: enable HTTPS. If you enable HTTPS, you must upload an HTTPS certificate.
Certificate Alias		1. The certificate alias can be customized while uploading the certificate. 2. if no valid certificate found in the drop-down list, please go to Click to upload to upload your certificate first.

Content Delivery Network

Enabling HTTPS