SSL and HTTPS with Your Own Certificate

Put your certificate on a site

Every project serves HTTPS with your own certificate. Paste it in Setup SSL and the site uses it at once. A certificate from any trusted CA works, and so does a CDN origin certificate, for example a Cloudflare Origin Certificate.

01 · Install a certificate

1. Click Setup SSL. The SSL Certificate Setup dialog opens.
2. In Certificate (PEM format), paste the contents of the .crt file. It starts with -----BEGIN CERTIFICATE-----.
3. In Private Key (PEM format), paste the contents of the .key file.
4. In Certificate Chain (optional), paste the intermediate certificates (the CA bundle).
5. Click Install Certificate.

Opensolr checks that the key belongs to the certificate, points the project's existing virtual host at the new files and reloads Apache. Nothing else in the virtual host changes.

02 · Good to know

• Use a certificate with an RSA private key. The key check refuses other key types.
• The project needs a virtual host first. Without one, the certificate files are saved and you are asked to click Create VHost, then install again.
• Until you install yours, a new project uses a temporary self-signed certificate. View Certificate tells you so.
• One certificate for several names, such as example.com and www.example.com: add the extra names as Server Aliases in Edit Settings, and use a certificate that lists all of them.

03 · View Certificate

The project's info panel also shows its SSL Status.

04 · Renewal

Your certificate does not renew by itself. Before Expires At, install the new one with Setup SSL, the same way.

You can also manage certificates and Apache yourself from the Terminal tab or over SSH.