[[TranslatedPages]]

= Configure your web site to use an x509 (aka SSL or https) certificate =

The process of using an https enabled web site is fully handled in the members control panel:

 * Log in via: https://members.mayfirst.org/cp
 * Choose the "Web Configuration" section
 * Edit your web configuration and change the "Port" field to "auto"

== How does it work? ==

You have several options when choosing to configure your web sites.

=== auto ===

The best option is to use "auto." When your web site is configured to use auto, then:

 * A [https://letsencrypt.org/ letsencrypt] certificate will be automatically generated at no cost for all the domains in your web configuration (both Server Name and Server Alias).
 * This certificate will be automatically updated every three months
 * All requests sent via http will be automatically redirected to https

=== http ===

If you prefer,  you can opt instead to have an http-only site by choosing http.

=== https ===

You may also wish to use your own certificates, in which case select "https" and specify the `SSLEngine On`, `SSLCertificateKeyFile`, and `SSLCertificateFile` parameters in your configuration that point to the appropriate files. Use this option if you don't want an http site at all.

=== Both http and https ===

You can also choose to have a different web configuration for http and https or control the redirecting in a more fine-tuned way.