What is HTTPS?

HTTPS refers to Hypertext Transfer Protocol Secure, a security protocol that encrypts and transfers data based on the HTTP protocol to ensure the security of data transfer. When configuring HTTPS, you need to provide a certificate for the domain name and deploy it on all CDN nodes to implement encrypted data transfer across the entire network.

Does CDN support HTTPS configuration?

Yes. Tencent Cloud CDN fully supports HTTPS configuration. You can either upload your own certificate for deployment or go to the SSL Certificate Service console to apply for a free third-party certificate provided by TrustAsia.

How do I configure an HTTPS certificate?

You can configure an HTTPS certificate in the CDN console. For detailed directions, please see HTTPS Configuration Guide.

Do the HTTPS certificates on CDN nodes need to be synchronized with HTTPS certificate updates on the origin server?

This depends on your origin-pull method.
HTTP origin-pull: they do not need to be synced.
HTTPS origin-pull: when the certificate on the origin server is updated, the certificate on the CDN node needs to be updated synchronously. The certificate between the client and the node must be identical to the one between the node and the origin server. Otherwise, the origin-pull will fail.

Can I deny HTTP access and allow HTTPS access only?

Yes. After successfully configuring an HTTPS certificate, you can use the Forced Redirection feature. HTTP requests from users will be forcibly redirected to HTTPS requests.

Why does HTTPS access not work after CDN is configured?

For HTTPS access, please configure it as instructed:

1. Log in to the CDN console, select Domain Management on the left sidebar, and click Manage on the right of a domain name to enter its management page.
   
2. Open the Advanced Configuration tab to find the HTTPS Configuration section, and click Configure Now to go to the Certificate Management page. For configuration directions, please see HTTPS Configuration Guide.
   
   HTTPS access can be enabled after the certificate is successfully configured.