Network Soltutions Purchase Ssl Certificate and Upload Csr

Secure Sockets Layer (SSL)

SSL/TLS certificates enable visitors to connect to your site with HTTPS, a secure protocol for exchanging information on the Internet. An SSL document volition add together a layer of secure encryption to your website, so any data transferred by your website is encrypted. In this article we will explicate how to obtain an SSL certificate for your website on the WP Engine platform.

Virtually HTTPS, TLS and SSL

HTTPS (Hypertext Transfer Protocol Secure) is the protocol for secure communication on the Www, and it prevents eavesdroppers from seeing information that visitors send or receive over the Internet. HTTPS secures its connections by using SSL/TLS, protocols that authenticate web servers and that encrypt messages sent between browsers and spider web servers.

TLS (Transport Layer Security) is a cryptographic protocol that provides secure communication over the Internet. HTTPS uses TLS to secure communication for website visitors. TLS provides the following security benefits:

Identity authentication — The browser determines whether a web server is the right server, and not an imposter.
Privacy — Data between the browser and web server is kept private by using encryption.
Data integrity — Messages between the browser and the web server cannot exist contradistinct by others (e.g., during a human-in-the-center set on).

SSL (Secure Sockets Layer) is the predecessor of TLS. After SSL 3.0, the side by side upgrade was named TLS 1.0 (instead of SSL 4.0) considering the version upgrade was not interoperable with SSL iii.0. Many people refer to TLS every bit SSL (former habits die difficult) or as SSL/TLS, even though all versions of SSL are technically at present deprecated.

Review our guide for more data on which TLS versions are currently supported.

Cheque for an SSL

To decide if you have an SSL certificate installed on your website, visit your domain (for example mycoolwebsite.com) with https:// in front end. The "s" in HTTPS stands for "secure".

If you see a secure padlock side by side to the domain this means your site is secured by an SSL certificate. You tin can as well click on this icon to view certificate details, such as expiration engagement and issuer.

If y'all run across a security warning, this ways your site is non secured by an SSL and you will need to add one.

If the padlock next to your domain is broken, crossed out, or shows "more than info", this means your site is secured past an SSL but at that place is mixed content on the page that needs correcting.

You tin can besides test your SSL status with an external tool:

Qualys SSL Labs – Server Test
SSL Shopper – SSL Checker

Add SSL

Before calculation an SSL to your domain, you'll demand to ensure that the domain has been added to the User Portal and that y'all've pointed DNS for the domain. An SSL cannot be successfully ordered or installed without both of these steps completed.

Open the User Portal
Select the product environment name
Click SSL
Click Add Certificates
Select an particular from this SSL Document Options list:
- Go Free Allow'due south Encrypt SSL Certificates
- Import A New or Existing tertiary-party SSL Certificate
Follow the prompts to complete the request process
When the SSL has completed installation, you will receive an email and the SSL options will go available

The procedure is automated from here. Once the order is placed, our organisation will verify DNS has been pointed and install the certificate. Certificates typically install inside just a few minutes, however in some cases this can have up to 24 hours.

All SSLs ordered through WP Engine default to Machine-Renew and Secure All URLs.

Let's Encrypt SSL Certificates

Let's Encrypt offers free domain-validated (DV) single-domain SSL certificates, which are ideal for almost every website. In virtually cases ii Allow's Encrypt certificates need to exist ordered for a unmarried site; 1 for World wide web and 1 for non-WWW.

If you lot should, but practise not see the Www or non-WWW version of your domain listed hither, be sure both variations are added to the User Portal.

Let's Encrypt certificates expire later ninety days. Our system will endeavour to auto-renew these 22 days before expiration.

Ordering a Let's Encrypt certificate replaces any existing certificates on WP Engine for that domain (EX: 3rd-party certificate).

Import 3rd-Party SSL Certificate

Importing a 3rd-party SSL is necessary for a variety of situations:

If you lot already take a valid SSL certificate you want to utilize
If you need to employ a wildcard SSL document
If y'all need to use an Extended Validation (EV)
If you demand to utilize a Multi-Domain certificate (SAN)

3rd-party SSLs also permit you to secure the domain prior to DNS beingness pointed to WP Engine. The SSL will not be active until you indicate DNS to your WP Engine server and add the domain in the User Portal. Yous may need to use the host file trick to test the SSL before pointing DNS.

To import whatever tertiary-party SSL successfully, a matching certificate and key file are required. In some cases, there may likewise exist boosted intermediate certificates that you lot must provide.

Startup level plans cannot have a 3rd party SSL certificates imported, check out our other SSL offerings here. On Shared hosting plans, only Production environments can accept a domain added and therefore only production can have an SSL installed.

Import Using Existing Certificate Files

If you already have both the SSL certificate and the matching private fundamental file, use these steps. If you're not sure if you take both matching files, proceed instead with the Generate a New Certificate Signing Request (CSR) steps below.

Log in to the User Portal
Select the environsname you lot wish to upload files for
ClickSSL
Select Add Certificates
Nether Import using existing certificate files, select Upload Files

Either copy and paste the contents of your existing certificate files into the fields, or select Upload the {cardinal or certificate} file
- RSA private key (KEY)
  - Paste in the total key including -----Begin PRIVATE Key----- and -----END Individual Primal----- or -----BEGIN RSA PRIVATE KEY----- and -----Stop RSA PRIVATE Fundamental-----
  - If you choose to upload a file instead, key files must be RSA type keys with a .key file blazon.
- Certificate (CRT)
  - Only PEM formatted certificates will be accepted in this field. Paste in the total PEM chain including -----Begin Certificate----- and -----END CERTIFICATE-----
  - If you choose to upload a file instead, certificate files must be PEM formatted with .pem, .crt, or .cer file types.

Paste or upload the certificate and key contents in the WP Engine User Portal.

Click Adjacent
Verify the certificate information is valid
- The correct domain(s) should be listed and selected
- The certificate validity date should exist current, and not expired
Click Side by side
Choose HTTPS Preferences
- Secure All URLs (default) will force all URLs to HTTPS in one case the SSL has been successfully installed. For more information see Secure URL Options below.
Click Upload Certificate

Your certificate and key file will then be reviewed, and if they match they will exist installed and activated. If your files do not friction match, you volition receive a observe and the SSL will not be installed or activated.

Generate New Certificate Signing Request (CSR)

This department volition assistance y'all generate a CSR (Certificate Signing Request) and import your matching document file to WP Engine. Generate a CSR and follow these steps if y'all don't have a certificate file, don't have a key file or if y'all practice not have a matching certificate and primal file.

Remember, WP Engine needs both a key file and a certificate file that lucifer each other to successfully install an SSL. Generating a CSR will complete the central portion of these requirements for you, so all you have to practise is retrieve the matching certificate from the SSL issuer and provide information technology to us.

Log in to the User Portal
Select the environmentname you wish to generate a CSR for
ClickSSL
Select Add Certificates
Under Generate a new certificate signing asking (CSR), select Create CSR

Select the Certificate Type
- This should lucifer the type of existing SSL that you will be importing
Select thedomain(south) the certificate was issued for when it was originally purchased
Fill up in the necessary Business Information
Click Generate CSR

The adjacent page will evidence your CSR file contents
Ostend the information on the right side of the page is correct
UtiliseClick to copy orDownload as .CSR to ensure yous copy the full contents of your CSR correctly. The full CSRwill include the post-obit text at the top and bottom:
- -----Begin CERTIFICATE Request-----
- -----END CERTIFICATE REQUEST-----

We advise leaving this page open in a divide tab or window so y'all tin can easily return to it later.

Once you have the CSR, you must provide this to your tertiary party SSL certificate authority. The SSL document authority, or issuer, is the visitor from which you originally purchased the SSL certificate.

Log in to your SSL issuer'due south portal, or reach out to their Support squad
Request your SSL files for installation on another server, you may demand to request that the SSL be re-keyed
Provide the CSR file to the issuer
If the issuer asks for server type, chooseApache orNginx
Your SSL certificate issuer volition render a newly generated SSL document file(south)
- There may be multiple files, be sure to save everything the issuer provides
Re-create or save whatsoever files provided to your local reckoner in a location where you can easily find them subsequently
- The full certificate contentswill include the post-obit text at the top and bottom:
  - -----Brainstorm CERTIFICATE-----
  - -----END Certificate-----

When you are set up to upload your document, return to the WP Engine User Portal

If y'all left the CSR page open up previously, just click Upload Certificate on the right.

If you lot navigated abroad from the CSR page, the asking tin can be managed once again any time from the SSL page in your User Portal. Click the arrow side by side to a pending asking to expand the options to Upload Certificate (CRT), View certificate signing asking (CSR), or Delete and Revoke CSR. To upload a certificate, merely click Upload Certificate (CRT).

Paste or upload any document files provided past the SSL issuer
Click Next
- The file volition automatically be compared to the CSR for a friction match. Yous will be taken to the side by side folio if the files match.
- If the CSR and the CRT exercise not match, you will come across the message: This document did not match the CSR. You will need to copy the CSR once again and repeat the steps to recall whatever document files from your SSL issuer.
Verify the document information is valid
- The correct domain(due south) should exist listed and selected
- The certificate validity date should be electric current, and not expired
Click Next
Choose HTTPS Preferences
- Secure All URLs (default) volition strength all URLs to HTTPS once the SSL has been successfully installed. For more information see Secure URL Options below.
Click Upload Certificate

Potential SSL Issues

When requesting, installing or activating an SSL, information technology is possible to run into issues. If yous experience problems with your SSL, WP Engine Support is available 24x7x365 to assist and we've provided some additional troubleshooting information below.

SSL Issuing Errors

If your SSL request fails to procedure automatically, a Support ticket will be generated titled "Certificate Domain Validation Error" or "Certificate Authority Error." If you experience these errors make certain your DNS is pointed correctly to WP Engine, and that your domain does not redirect to another domain.

Let's Encrypt also does not consequence certificates for loftier-hazard domain names—those that resemble well-known banks or brands (EX: wellsfargo.globe or cocacola.info) or for sites thatGoogle tags as dangerous.

Cloudflare

If you are using Cloudflare, you will likewise demand to configure SSL settings in their dashboard. Larn more nigh Cloudflare best practices.

SSL/TLS certificate warnings for Internet Explorer on Windows XP

WP Engine uses Server Proper noun Indication (SNI) for SSL/TLS certificates. SNI provides an efficient way to configure certificates, and it works well with most browsers. Notwithstanding, visitors that use Internet Explorer on Windows XP may see the following error. It'due south best to use an alternate or updated browser.

Sucuri WAF

Sucuri'due south firewall service may prevent your SSL from processing, due to an boosted DNS layer. Please contact the Sucuri squad directly to request enabling the Forward Certificate Validation to Hosting choice. This volition allow your Let's Encrypt certificate request to process usually.

Mixed Content

Mixed content is media or other links on pages within your website that are not properly secured past SSL. These links use http instead of https when loaded onto the page and will cause an insecure alert on some parts of a website. Mixed content is like shooting fish in a barrel to correct, encounter our correcting mixed content guide for more data.

Secure URL Options

To see your SSL options simply click on the domain name to expand the options. The option "secure all URLs" is selected on an SSL ordered through WP Engine by default.

This option tells our platform to automatically serve HTTP page requests secured with HTTPS. I important thing to note when you cull this option is to ensure you are not using whatever force SSL plugins.

You will also have the option to select "Secure Specific URLs". If you choose this option yous will need to use RegEx to ensure those URLs are secured properly.

Forcefulness SSL Plugins

Force SSL plugins tin can cause redirect loops when their settings conflict with the settings on the SSL dashboard. We recommend that you leverage the settings that we provide in the SSL dashboard as they work server side and have been tested extensively with our platform. Using settings directly at a server level keep the force SSL functionality on Nginx, making information technology faster and more effective.

How do I know if I use a strength SSL plugin?

It'due south possible for plugins not specifically dealing with security to to include such a setting. For example, WooCommerce offers an option to force the apply of SSL. In full general, to find plugins that could be forcing https usage on your website:

Log into your site'southward WordPress Admin
Visit the Plugin folio
Expect for any plugin that mentions Securing Pages, HTTPS, or SSL

Mutual Force SSL Plugins

Force SSL
WP Force SSL
WordPress HTTPS
Verve SSL
Really Simple SSL
Like shooting fish in a barrel HTTPS Redirection

Side by side Footstep: How to set up mixed content errors

fongthencent.blogspot.com

Source: https://wpengine.com/support/add-ssl-site/