SSL certificates, oh SSL certificates. Where to begin? These little certificates help hold the big web securely together to protect websites. But they are finicky. Reclaim Hosting uses Let’s Encrypt across our infrastructure and using it on Reclaim Cloud was a no-brainer. Jelastic partners with Let’s Encrypt to bring SSL certificates as an addon to most environments.

This week was all about SSL certificates. And continuing on-trend with Reclaim Cloud learning, specifically using a custom wildcard SSL certificate for a few WordPress Multisite’s Reclaim Hosting manages.

I’d always issued SSL certificates through Let’s Encrypt in cPanel or within the Addon feature in Reclaim Cloud. Let’s Encrypt makes it super easy to work with the SSL certificates by provisioning and renewing automatically.

Let’s Encrypt Addon Sometimes though, the SSL certificate doesn’t provision properly. So a quick tip I found (thanks to Goutam!) you can add your custom URL to the Let’s Encrypt add-on. So while your URL is active and online, Let’s Encrypt will need a “refresher” to issue the certificate to that particular URL.

If the URL is not listed you can add it to the external domains section and apply the setting. You will need to update the SSL certificate from here.

Custom SSL The next options through Reclaim Cloud for SSL is a custom SSL certificate. You can purchase the SSL certificate from an external company and work with that with your environment. I found that the SSL documentation on Jelastic was super helpful in this capacity. We recently had to add an SSL certificate to cover a wildcard subdomain, for a WordPress multisite.

The custom SSL certificate needs 3 items to implement, a server key, intermediate certificate, and the domain certificate.

First, we needed to generate the certificate signing request (CSR). This is done through a program like OpenSSL and it runs through the WebSSH feature for the environment. Once we have the CSR, we’ll receive a server key. The server key is uploaded to our environment, then send the user the CSR.

Then the user will use the CSR to generate the Intermediate Certificate and finally the Domain Certificate. The Intermediate Certificate is used with the provisioning company to ensure they’re verified to issue the SSL certificate to Reclaim and to the user. These are then sent back to Reclaim to upload to the environment.

Once all 3 items are in place, we can issue the SSL certificate for the environment. We did run into the issue where we needed to reissue the Let’s Encrypt plugin to cover the main URL on the WPMS from there.

Typically SSL certificates can last 3months when working with Let’s Encrypt, or 1 year+ when working with another company. Let’s Encrypt renews automatically while the third party certificate will need to be updated manually.

This process was super interesting to learn, as I’ve only worked with SSL through Let’s Encrypt previously and realized how easy it is to provide your own certificate through a third party if needed!

—

Photo by Wolf Zimmermann on Unsplash