Certificates
============

You can install TLS certificates on your symBalancer which can be used to 
terminate HTTPS connections at the balancer.  Certificates show up in the 
selection box when adding **HTTPS** ports.


Add a Certificate
-----------------

Click :guilabel:`Add certificate` to open the add certificate dialog, and 
fill out the following fields: 

* **Name:** Enter a name for your certificate. 
* **Certificate:** Paste your certificate (along with any chain certs).
* **Key:** Paste your private key.
* Click :guilabel:`Submit`.

The server will check validity and if all is okay, it will be added to the 
certificate list.


Certificates list
------------------

.. image:: ../_static/images/certificate_list.png
    :target: ../_static/images/certificate_list.png

This is a list of all certificates installed on the balancer.  Each row contains:

Name
    Certificate name, as provided when it was added.

Fingerprint (MD5)
    MD5 Fingerprint of the certificate.  This is for verifying if a 
    certificate has changed since you originally added it.  An example 
    command to check the MD5 might be something like this: 

.. code-block:: shell
   :caption: Verify MD5 fingerprint of a certificate
    
    openssl x509 -in /my/certificates/[MYCERT] -noout -fingerprint -md5 

Delete
    Click to delete a certificate.  Once confirmed, the certificate is removed 
    from your balancer.

.. Note::
   Certificates must be removed from any ports they are in use on, before they can
   be deleted.