Configuring Radar agent certificates
This section describes details and best practices for configuring API Monitoring Radar agent certificates.
In this topic:
Supported SSL CA certificates for Radar agent
The Radar agent supports certificates from the following authority list: Mozilla Included Root Certificate List.
Best practices for configuring trusted certificates
From October 2023, the Radar agent has transitioned to using public certificates issued by Let's Encrypt, which are in turn signed by the ISRG Root X1 trusted root certificate authority. A comprehensive guide on this process can be found on the Let's Encrypt website.
Given that the Radar agent uses system-/OS-level certificate authority bundles, you shouldn't encounter any issues because the majority of operating systems and contemporary browsers recognize the ISRG Root X1 root certificate authority.
We recommend the following best practices when configuring trusted certificates:
-
Use the latest version of the Radar agent.
-
If you are using the Radar agent to supply a custom CA bundle, use the cafile option.
API Monitoring periodically updates leaf/child certificate for api.runscope.com or *.runscope.com. If you are providing the Radar agent with a custom CA bundle file, ensure to include the ISRG Root X1 trusted root certificate and not just the leaf/child certificate. Do this to avoid service interruption or failure when the certificates are refreshed.
For more information on configuration options, see the configuration file reference in Radar agent overview.