Cloud Platform
Obtaining an SSL certificate
After you generate a Certificate Signing Request (CSR) for an environment, the next step for enabling SSL is to obtain an SSL certificate.
You can purchase SSL certificates from many vendors. Each vendor will have its own prices and purchase process, but all of them should accept the CSR that you generated and copied using the Cloud Platform interface and the procedure described in Generating a certificate signing request (CSR). Paste the encoded CSR into the vendor’s purchase form. You can use any type of SSL certificate with Cloud Platform, including single domain, multi-domain (Unified Communications Certificate (UCC)/Subject Alternative Name (SAN)), wildcard, extended validation, and even self-signed certificates. If your vendor requires you to specify the infrastructure type for the certificate, choose Nginx or, as a second choice, Apache. For more information about different types of SSL certificates, see Types of SSL Certificates.
In general, certificates from reputable vendors will work properly on Cloud Platform.
Acquia is aware of the following issues:
Be aware of the following requirements when you obtain your certificate:
acquia-sites.com certificate for default domain names, due to how Acquia-provided certificates may be renewed or altered at any time.Your website’s SSL certificate is at the head of a chain of certificates that starts with your website and ends at a root certificate, issued by a trusted Certificate Authority, or CA. Every certificate indicates who it was issued by and who it was issued to, which enables web browsers to follow the chain to see if the certificates should be trusted.
Your SSL certificate vendor will provide you with an SSL certificate and may possibly also provide you with additional certificates, called Certificate Authority intermediate certificates or chain certificates. If your SSL certificate vendor is Thawte, click here to see the intermediate certificate. Intermediate/chain certificates are required as part of the installation process on Cloud Platform.
Some SSL certificate vendors might combine multiple certificates into a single certificate. Combined certificates of this nature are not extensively tested on Cloud Platform. Therefore, Acquia is not aware of any issues with these certificates on Cloud Platform.
For some limited purposes, such as enabling IPv6 support without SSL, or testing SSL, you can create a self-signed SSL certificate to use with Cloud Platform. You can then upload this self-signed certificate instead of purchasing a certificate. For more information, see Creating a self-signed SSL certificate.
After you receive an SSL certificate from your SSL certificate vendor, install it on your Cloud Platform environment(s). For additional information about how to do this, see Managing SSL certificates.
If this content did not answer your questions, try searching or contacting our support team for further assistance.
Be aware of the following requirements when you obtain your certificate:
Cloud Platformacquia-sites.com certificate for default domain names, due to how Acquia-provided certificates may be renewed or altered at any time.Your website’s SSL certificate is at the head of a chain of certificates that starts with your website and ends at a root certificate, issued by a trusted Certificate Authority, or CA. Every certificate indicates who it was issued by and who it was issued to, which enables web browsers to follow the chain to see if the certificates should be trusted.
Your SSL certificate vendor will provide you with an SSL certificate and may possibly also provide you with additional certificates, called Certificate Authority intermediate certificates or chain certificates. If your SSL certificate vendor is Thawte, click here to see the intermediate certificate. Intermediate/chain certificates are required as part of the installation process on Cloud Platform.
Some SSL certificate vendors might combine multiple certificates into a single certificate. Combined certificates of this nature are not extensively tested on Cloud Platform. Therefore, Acquia is not aware of any issues with these certificates on Cloud Platform.
For some limited purposes, such as enabling IPv6 support without SSL, or testing SSL, you can create a self-signed SSL certificate to use with Cloud Platform. You can then upload this self-signed certificate instead of purchasing a certificate. For more information, see Creating a self-signed SSL certificate.
After you receive an SSL certificate from your SSL certificate vendor, install it on your Cloud Platform environment(s). For additional information about how to do this, see Managing SSL certificates.
If this content did not answer your questions, try searching or contacting our support team for further assistance.