liveBook · Manning

Certificate

As explained in Building Web APIs with ASP.NET Core

A TLS certificate is a digitally signed credential that binds an identity to a public key for authenticated encrypted connections.

A TLS certificate is a digitally signed credential that binds an identity to a public key. For a web API served through a CDN, certificates help secure two different connections: the visitor-to-CDN connection and the CDN-to-origin-server connection. section 12.1.3

Cloudflare provides a certificate for each side of that arrangement:

  • The edge certificate is generated automatically and used by Cloudflare when serving visitors, providing HTTPS support for the API. section 12.1.3
  • The origin certificate can be generated manually and installed on the web server hosting the API, encrypting the connection between Cloudflare and that server. section 12.1.3

A certificate does not start the web server

Suppose win-01.mybglist.com resolves through Cloudflare, but the Windows VM has no web server listening on HTTP port 80 or HTTPS port 443. A browser request receives Cloudflare’s 522 Connection timed out error. The problem is the CDN-to-host connection, not something an origin certificate alone can fix. Configure a web server to handle incoming requests, then create the SSL/TLS certificate for the origin server. section 12.2.3

How Building Web APIs with ASP.NET Core covers it

How deep it goes
Distinguishes automatic edge certificates from manually installed origin certificates, but stops short of certificate-generation steps.
Examples
Uses Cloudflare’s two certificates and a Windows VM returning a 522 error before its web server is configured.
What it assumes
Assumes a Cloudflare-managed domain and an origin server; introduces the two certificate roles before origin setup.
What you can do after
Operate/configure it by placing an origin certificate on the web server while relying on Cloudflare’s automatic edge certificate.
How it connects
Connects certificates to HTTPS, CDN architecture, origin servers, DNS, and web-server availability.

Also explained in

Compare how 15 books explain certificate →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Building Web APIs with ASP.NET Core. The section links point to the parts of the book it draws on.