Configure HTTP connection to the source
By default, the CDN requests content from the source over HTTPS. This allows for additional:
- check the source certificate when querying the source;
- specify the name of the SNI host If multiple domains can point to the same IP address, the source will give the certificate of the required domain. SNI (Server Name Indication) is the host name that is passed in the TLS request.
If the content source does not support encryption, you can disable the use of HTTPS. We do not recommend disabling HTTPS - it reduces security and increases the risk of MITM attacks. In a MITM attack, attackers can intercept logins, spoof page content, and inject malicious code. If you disable the use of HTTPS, source certificate validation and SNI host specification will not be available.
Verify the certificate of the content source
Verification confirms that the certificate:
- issued by a trusted certificate authority (CA);
- is valid;
- corresponds to the source domains;
- corresponds to the SNI host, if specified.
-
In the Control Panel, on the top menu, click Products and select CDN.
-
In the CDN Resources section, click on the resource card.
-
In the CDN Resources section, open the resource page → Source tab.
-
In the HTTP Settings for Sources block, check the Validate source certificate checkbox.
-
Click Apply. The resource will be in
PROCESSINGstatus while the settings are being applied . You cannot apply any other settings at this time. The settings will be applied when the share changes toACTIVEstatus.
Specify the name of the SNI host
-
In the Control Panel, on the top menu, click Products and select CDN.
-
In the CDN Resources section, open the resource page → Source tab.
-
In the HTTP Settings for Sources block, check the box next to Specify SNI host name.
-
Enter the name of the SNI host - a domain without specifying a protocol, for
example example.com. This value will be passed in the SNI header when establishing a TLS connection. -
Click Apply. The resource will be in
PROCESSINGstatus while the settings are being applied . You cannot apply any other settings at this time. The settings will be applied when the share changes toACTIVEstatus.
Disable the use of HTTPS
-
In the Control Panel, on the top menu, click Products and select CDN.
-
In the CDN Resources section, open the CDN Resource page → Source tab.
-
In the HTTP Settings for Sources block, clear the Use HTTPS when requesting sources checkbox.
-
Click Apply. The resource will be in
PROCESSINGstatus while the settings are being applied . You cannot apply any other settings at this time. The settings will be applied when the share changes toACTIVEstatus.