Step-by-Step Guide to Obtaining and Configuring an SSL Certificate for Mini Programs

Preparing to launch a mini‑program that requires HTTPS, the author records the full workflow and common issues encountered.

Step 1 – Apply for an SSL certificate : The guide recommends using the free service at freessl.cn . An offline generation method is chosen, which requires a client software to parse the domain. Users of Alibaba Cloud can use one‑click generation, but it does not support the Asian Certification Authority needed for mini‑programs.

Step 2 – Export the certificate : After completing the domain verification, the tool downloads a ZIP package containing a .pfx certificate. The ZIP is extracted and the .pfx file is placed in the appropriate directory (e.g., the IIS folder, not Tomcat). The password for the certificate is the one set during the export step; any matching password works.

Step 3 – Configure the server :

server:
  port: 443
  ssl:
    key-store: classpath:aaaaa.pfx
    key-store-password: yourpassword
    keyStoreType: PKCS12

The password must correspond to the one used when exporting the certificate, and the file name should match the reference in the configuration.

Finally, the author invites readers to discuss the approach, ask questions, and join the architecture community for further exchange.