SSL Configuration

uniGUI supports the SSL protocol for Standalone Server and Windows Service applications. ISAPI modules require configuring SSL for your particular ISAPI server; IIS, Apache, etc.

circle-info

Instructions on this page apply only to Standalone Server and Windows Service deployment options. For other deployment methods such as ISAPI or Apache, configure SSL using those tools' specific instructions. For details, refer to the related documentation for Windows IIS or Apache.

The first step to configure SSL is to obtain the required certificate files. In Standalone and Windows Service modes, uniGUI uses Indyarrow-up-right as the underlying TCP transport layer.

There are three files which you must provide:

  • root.pem

  • cert.pem

  • key.pem

Files are in pemarrow-up-right format. PEM files are human-readable base64 ASCII files which can be opened and edited in a text editor. A PEM file may contain a single certificate or more than one certificate. In order to work with Indy, each PEM file must contain only one certificate.

The sample below shows the content of a PEM file:

chevron-rightSample PEM file contenthashtag

-----BEGIN CERTIFICATE-----

MIIB8jCCAV+gAwIBAgIQfjGd2Py0qZJGqdkPiRlDdjAJBgUrDgMCHQUAMBAxDjAM

BgNVBAMTBWVsaXRlMCAXDTEzMDYwMjE3NTA0OFoYDzIxMTMwNTA5MTc1MDQ4WjAQ

MQ4wDAYDVQQDEwVlbGl0ZTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAt3pi

pMYHNzUueLZBb1eMrPop6Emta/KLyLaK94vlM1lV/6ITiuFtuSs9gq0s516s2th7

FUkBpgfQvrb+3b9h10WMca8MTbYrLGL+dHqRk4jGt/8GAUeYHkKddk/NeXkZWqaD

3aMdURpTgE2iK/d86C1YdsxqXTxP+Uax/eN4RUECAwEAAaNTMFEwFQYDVR0lBA4w

DAYKKwYBBAGCNwoDBDAtBgNVHREEJjAkoCIGCisGAQQBgjcUAgOgFAwSZWxpdGVA

RUxJVEUtUFJJTUUAMAkGA1UdEwQCMAAwCQYFKw4DAh0FAAOBgQCDSHm54tMh1sPY

aBrpZeZtbt9e1gPZ2B/Gd7U2KGK46yM8OQQ3LlnPaTc96q2ocD9sL3GP1B2itwX/

THOgUX7MpUipfUg6+8te6A7//gjiGyCf/OauJJrHal8p2QPwecGo3YnxUvTCu9gH

+iGE3Yqxv/6YqgDjGnpNdAvvX9gEfQ==

-----END CERTIFICATE-----

There are two types of certificate you can use with your uniGUI server:

  • A certificate issued by a certificate authority (CA)

  • A self-signed certificate (suitable for development, testing, or private use)