TLS

In the default configuration, the Web Accelerator redirects to HTTPS for all requests received with HTTP. This is mandatory if the WAF function is active.

It is possible to install commercial certificates purchased by the customer or generate and renew them automatically with Let's Encrypt.

Management of Let's Encrypt Certificates

Normally, the Web Accelerator uses the HTTP-01 authorization method to obtain certificates from Let's Encrypt. This requires that the domain is already pointing to the Web Accelerator at the time of the request, so to avoid disruption, our staff can temporarily install a certificate obtained from the backend, which will be automatically replaced within hours by a new one issued by Let's Encrypt.

If it is not possible to obtain a working certificate for a domain that is being transferred to the Web Accelerator, and you do not wish to purchase a commercial one, you can coordinate with our staff to request the certificate from Let's Encrypt immediately after the DNS has been updated, to minimize disruption for visitors.

In the case where a wildcard certificate with Let's Encrypt is required, you can use the DNS-01 authorization method by creating a record in your DNS zone of type:

 _acme-challenge.example.com. CNAME example.com.acme-wa.seeweb.it.