SSL Certificates¶

Automatic SSL Certificates with Let's Encrypt¶

Fully-automated issue and renewal of free certificates from Let's Encrypt is managed in your site configuration.

To use a Let's Encrypt SSL certificate with your site:

1. Ensure that all of your site's domains and subdomains are active and pointing at your Opalstack server.
2. Activate the "Let's Encrypt SSL" option when you create or edit the site.
3. Ensure that the site has no more than 20 domains associated with it.
4. When the certificate is ready (typically after 5-10 minutes or less) a message will be posted to your notice log.
5. If the certificate could not be provisioned a message will be posted to your notice log with the details of the problem.

Manual SSL Certificates¶

The procedures for managing your certificates manually are as follows.

Adding a Certificate¶

1. Obtain a certificate from your preferred SSL certificate provider.

2. Click on Certificates in the dashboard sidebar.

3. Click the button labeled "Add Certificate" in the upper-right corner of the content area. A form will appear.

4. Enter a name for your certificate in the Name field.

5. Paste the text of your certificate's key into the Key field.

   Be sure to include the -----BEGIN PRIVATE KEY----- and -----END PRIVATE KEY----- lines.

6. Paste the text of your certificate into the Certificate field.

   Be sure to include the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines.

7. If your SSL provider gave you an intermediate certificate or similar file, then paste the text of your intermediate certificates into the Intermediate Certificates field.

   Be sure to include the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines for every intermediate certificate in your chain.

8. Click the button labeled "Add Certificate" to save your certificate or click Cancel to discard it.

Assigning a Certificate to a Site¶

1. Click on Domains in the dashboard sidebar.

2. Click the Edit icon for the site to which you want to add your certificate. The edit icon is located in the rightmost column of the site list.

3. Select your certificate from the Certificate dropdown list.

4. Click the button labeled "Save" to save the new site configuration

Viewing Certificates¶

You can view the contents your certificates via your Opalstack dashboard.

1. Click on Certificates in the dashboard sidebar.

2. Click the View icon (an eye) for the certificate. A window with the certifcate contents will appear.

3. When you are finished, click the "Close" button.

Viewing API Details for Certificates¶

You can view the API details for your certificates via your Opalstack dashboard.

1. Click on Certificates in the dashboard sidebar.

2. Click the API icon (brackets) for the certificate. A window with the JSON API representation of the certificate will appear.

3. When you are finished, click the "Close" button.

Deleting Certificates¶

1. Click on Certificates in the dashboard sidebar.

2. Click the Delete icon (a trash bin) for your certificate in the right edge of the certificate list.

3. A confirmation prompt will appear. Click the Delete button to confirm the operation, or click the cancel button to cancel it.

4. The certificate will disappear a few seconds later when the operation is complete.