HTTPS

HTTPS protects the data visitors exchange with your site and shows the padlock in the browser. The panel uses free Let's Encrypt certificates.

Turning on HTTPS

Before starting, check that:

• the domain (and any aliases) already points to this server;
• port 80 of the server is reachable from the Internet (it is, unless you closed it in the firewall).

Then open the site, Overview tab, SSL / HTTPS box, and press Get a free certificate. You can enter an email Let's Encrypt will write to in case of problems.

The request usually takes less than a minute and continues in the background. When it is done the site answers in HTTPS and whoever opens the HTTP address is taken automatically to the secure version.

Renewal

Certificates last 90 days and renew by themselves about a month before they expire: there is nothing to do.

If the renewal fails (for example because the domain no longer points to the server), the panel emails the administrators when fewer than 14 days are left. See System emails.

If the request fails

The most common cause is DNS: the domain does not point to the server yet, or the change has not propagated yet (it can take a few hours). Check the DNS and try again. The error details appear under the button (administrators also find them in Jobs).

Turning off HTTPS

In the SSL / HTTPS box press Turn off HTTPS: the site goes back to HTTP and the certificate is deleted.