Return Back to main Proxy SSL section
This feature is available on Artica v4.30 Service Pack 951 or Artica v4.40
It allows you to force the proxy to not decrypt SSL protocol using an SSL certificate fingerprint (sha1)
You can get and extract a SSL fingerprint from https://iplocation.io/ssl-certificate-fingerprint
For example, lets whitelist all websites from Google or IBM.
On Your Proxy > SSL Protocol, click on SSL Whitelist tab
Click on “New Rule” button
- Select Server SSL certificate fingerprint as type
- In pattern, you can set directly the sha1 fingerprint or put directly the full domain name.
- Click on Apply button
- If you set a domain instead of sha1 fingerprint, Artica will be in charge to get the fingerprint from the target website
- After refresh the list, you will see that your domain name will be moved to the description with the date of the retreived fingerprint.
