Meaning of Tencent cloud free SSL certificate extension file

background

Recently, some netizens reported that Tencent cloud API Explorer Tools , adopt API Upload Certificate （https://console.cloud.tencent.com/api/explorer?Product=ssl&Version=2019-12-05&Action=UploadCertificate&SignVersion=) Report errors . Tencent cloud SSL Certificate products , Can manage their own SSL Certificates can also be hosted by other manufacturers SSL Certificate file , If managed SSL When there are many certificate files, you can pass API To upload , At the same time, you can also use the console (https://console.cloud.tencent.com/ssl） Upload SSL Certificate to finally host the certificate file . The following is user feedback , adopt API Explorer Upload abnormal error .

User feedback questions （ chart 1）

After investigation, the final reason is , stay API Explorer The tool is a single line input certificate experience , While the actual SSL The content of the certificate file is multi line with newline , Line feed in urlencode Temporal escape , Finally, the interface is not recognized, resulting in an error , On the one hand, the optimized scheme is to correct the escape problem , Then it is to change a single line into multiple lines of input text , It is convenient for the naked eye to see , Enhance the user experience here .

API Explorer Upload Certificate , Experience before optimization （ chart 2）

API Explorer Upload Certificate , Optimized experience （ chart 3）

problem

The author also found a new experience problem here when reproducing the problems of users , If you have applied for Tencent cloud free SSL Certificate words （https://console.cloud.tencent.com/ssl） , Download after the application is passed SSL The effect of the certificate is as follows .

Free certificate download （ chart 4）

To download Nginx For example , The final downloaded certificate file , The screenshot is as follows .

Nginx Free certificate , Extract the content after downloading （ chart 5）

We can see here Nginx After downloading the free certificate （ chart 4） and API Explorer The description of the certificate uploaded by the tool is inconsistent （ chart 2） , among API Explorer The tool is to let you enter the public key （CertificatePublicKey) And a private key (CertificatePrivateKey) Does not correspond to the extension , Of course, if you are an old hand, it will not be difficult here , If you are a novice, you will have problems , I don't know how to fill in . In fact, Tencent cloud's free certificate passed TrustAsia etc. CA Issued by the agency TLS/SSL certificate , It is divided into four documents pem/crt/key/csr, The following is the meaning and correspondence of different documents API Explorer The content of .

Certificate extension	meaning	stay API Explorer The corresponding file name when uploading
crt	The applicant uses his own identity and public key to generate CSR file (certificate signing request), request CA Present yourself with CA Private key signed certificate
pem	pem It's just a way of coding , Content and csr The content of the document is the same （ Public key ）
csr	csr contain ssl Certificate owner identity, public key and other information	Public key （CertificatePublicKey)
key	Private key	Private key (CertificatePrivateKey)

Four certificate files MD5 value （ chart 5）

Solution

API Explorer The file extension corresponding to different secret keys of the tool . We are also continuously optimizing the experience here , If you have any questions about Tencent cloud experience, you can also leave me a message .

API Explorer The file corresponds to the certificate name （ chart 7）