This document uses the third-party developer domain name
www.example.com as an example. The following two cases may arise:
The third-party developer already has a certificate issued by an authoritative third party.
www.example.com.crtissued by and the private key
www.example.com.keyassigned by the authoritative third party for
www.example.com. Note that the certificate must be issued by an authoritative third party, such as Topway or GlobalSign.
The third-party developer sends an application to IM, requesting IM to issue a certificate for its domain name.
www.example.com, in the console.
www.example.com.crtand assigns the private key
www.example.com.keyto the developer with the domain name
www.example.com. The developer can download the certificate from the console.
TencentQQAuthCA.crtto the conf folder under the Apache installation directory.
SSLEngine on # Enables SSL SSLCertificateFile "/usr/local/apache2/conf/example.com.crt" # Certificate issued by Tencent to the third party SSLCertificateKeyFile "/usr/local/apache2/conf/example.com.key" # Private key paired with the certificate SSLCACertificateFile "/usr/local/apache2/conf/TencentQQAuthCA.crt" # CA certificate authenticated by Tencent SSLVerifyClient require # Verify the request source