Configure Alibaba Cloud OSS for sslTrus CaaS
Prerequisites
Before starting the configuration, please ensure you have completed the following preparations:
- Purchase sslTrus CaaS service: Please complete the purchase of the CaaS subscription first. For detailed purchase instructions, refer to sslTrus CaaS Purchase Guide.
- Apply for an SSL certificate: Please ensure the certificate has been successfully requested and issued. For detailed application process, refer to sslTrus CaaS certificate request.
Configure installation point — certificate update (Alibaba Cloud OSS)
Configure Alibaba Cloud OSS management interface
Prerequisites
Prepare the AK/SK of the Alibaba Cloud account that manages OSS in advance.
- Go to the control backend - Asset Management - Vendor Management, select Alibaba Cloud, and click Manage.
- Click Add Account.
- Enter the account name and the AK/SK of the Alibaba Cloud OSS management account, then click Save.
Permission description
The AK/SK for Alibaba Cloud OSS must have the following permissions enabled:
- ListCname
- PutCname
- ListBuckets
- Go to Asset Management and click Add Asset.
- Enter the asset name, select Alibaba Cloud OSS for the product, select the account you just created for the access account, enter the region ID (obtained from Alibaba Cloud), then click OK to save.
Configure CaaS
- Go to the console - sslTrus CaaS service, select the corresponding service and click Details to enter the CaaS management backend.
- Switch to the installation point tab, click Add Installation Node, enter the installation point name, select Alibaba Cloud OSS for the service type, select the asset created in the previous step for the asset name, enter the bucket name (obtained from Alibaba Cloud), enter the domain name in the custom domain name field, then click OK to save.
- After the configuration is completed, you can manage the node. Click Scan Now to start monitoring the node.
- When a new certificate is issued, click Push Certificate, and the system will push the new certificate to Alibaba Cloud OSS. You can see in the backend monitoring that the certificate is updated to the latest version.
