Configuring SSL Certificates for Link

After installing Link, setup the custom SSL certificates for the Link web UI and the Link runtime application server.

Note: For the Link web UI to use the certificate, ensure that /client/inbound/protocol is set to https and it is the default setting.

Create the SSL certificates or use the SSL certificates from a third-party provider (example GoDaddy Inc). PEM is the preferred format for the certificates. If the certificates are not of the PEM format, convert the certificates to PEM format.

Split the SSL certificates into three files. Each file must contain one of the following SSL certificate components:
  • Private key
  • Server certificate key
  • Certificate authority keys

The following table lists the GoDaddy-provided certificates in their corresponding files:

File Description
Private key file The file format is PEM and the extension of the file is KEY.

The content of the file starts and ends with the following lines:


------BEGIN PRIVATE KEY------
…
-----END PRIVATE KEY-----
Server certificate key file The file format is PEM and the extension of the file is KEY.

The content of the file starts and ends with the following lines:


------BEGIN CERTIFICATE------
…
-----END CERTIFICATE-----
Certificate authority (CA) keys You need these keys to sign off the private keys and public keys. Bundle the keys into a single file or multiple files. The files are not required if the certificates are self-signed.

The CA certificates start and stop with the following lines:


------BEGIN CERTIFICATE------
…
-----END CERTIFICATE-----