wiki:faq/security/setup-certificate

Version 16 (modified by Jamie McClelland, 3 years ago) (diff)

--

Languages:

Configure your web site to use an x509 (aka SSL or https) certificate

The process of using an https enabled web site is fully handled in the members control panel:

How does it work?

You have several options when choosing to configure your web sites.

auto

The best option is to use "auto." When your web site is configured to use auto, then:

  • A letsencrypt certificate will be automatically generated at no cost for all the domains in your web configuration (both Server Name and Server Alias).
  • This certificate will be automatically updated every three months
  • All requests sent via http will be automatically redirected to https

http

If you prefer, you can opt instead to have an http-only site by choosing http.

https

You may also wish to use your own certificates, in which case select "https" and specify the SSLEngine On, SSLCertificateKeyFile, and SSLCertificateFile parameters in your configuration that point to the appropriate files. Use this option if you don't want an http site at all.

Both http and https

You can also choose to have a different web configuration for http and https or control the redirecting in a more fine-tuned way.

What if I already have an https web site?

You can easily convert your site from an https web site to an auto web site.

If you have both an http and an https web configuration, you must first delete the http one.

Then, edit the https site and change it to auto.

Attachments (1)

Download all attachments as: .zip