The SSL certificate allows you to establish end-to-end encrypted connections when using Residential Proxies, the Web Unlocker or the SERP API.

If you are just doing preliminary testing, you can also proceed without the SSL certificate and use it later.

Using the SSL certificate is straight forward. You download it, and choose how you want to use it in your environment.

How to download the SSL certificate?

  • Click with the right mouse button on this link
  • In the opened list, select “save as”
  • In the opened window, click the “Save” button

ca.gif

Using the SSL certificate in your code

In most cases, you do not need to install the SSL certificate in your environment. Simply load the SSL certificate in your code. For example, for CURL:

curl --proxy brd.superproxy.io:22225 --proxy-user brd-customer-<account-id>-zone-<zone-name>:<zone-password> -cacert <PATH TO CA.CRT> "https://geo.brdtest.com/mygeo.json"

You can refer to Bright Data sample code examples in the dashboard for exact syntax.

Installation of the SSL certificate

If you choose to install the SSL certificate, follow these instructions:

  • Once you’ve download the certificate file (see the instruction on the top of this article)

How to ignore SSL errors?

In some cases you will need to install our certificate or ignore SSL errors in order to get access to specific products or features. In case you are not interested in installing our certificate, you can ignore SSL errors. Check out the following code snippets for different programming languages, the highlighted part is what needs to be added to your code in order to ignore SSL errors.

How does SSL analyzing works?

Some features require the Proxy Manager to have access to HTTPS traffic. This can be done by enabling the SSL Analyzing option on the proxy port configuration page.

Once you allow Proxy Manager to terminate the SSL you will also need to trust Bright Data Certificate Authority (CA).

Under the hood Proxy Manager will create a secure encrypted HTTPS connection with the target site, decrypt the traffic to log requests and run rules based on your settings and then pass the response back to your client in an encrypted HTTPS connection with a certificate signed by our CA certificate.