Use AutoSSL and custom SSL certificates
SSL can be enabled for apps using either AutoSSL or custom SSL certificates you provide.
AutoSSL
AutoSSL automates the use of free SSL certificates from Let’s Encrypt.
Add domains to an AutoSSL certificate
To include a domain in an app’s AutoSSL certificate:
- Add the domain to your app.
- Configure DNS for your domain to resolve to your server’s IP address.
Enable AutoSSL
To enable AutoSSL for your app:
- Go to the Apps page in the dashboard and click on the name of the app.
- Click on SSL.
- Click on Enable AutoSSL.
With AutoSSL enabled, your app is available over HTTPS.
Custom SSL certificates
If you already have a private key and certificate, you can directly add your custom SSL certificate without generating a key and CSR.
If you are purchasing a new SSL certificate from a Certificate Authority, you must first generate a key and CSR before your Certificate Authority can issue a certificate.
Add a custom SSL certificate
To add a custom SSL certificate:
- Go to the Apps page in the dashboard and click on the name of the app.
- Click on SSL.
- Click on Add a custom SSL certificate or generate a CSR.
- Paste your key and certificate into the SSL Key and SSL Certificate fields.
- Click on Update SSL Key and Cert.
ServerPilot will automatically add the necessary intermediary CA certificates for your Certificate Authority. Alternatively, you can include the intermediary certificates provided by your Certificate Authority in the SSL Certificate field when adding your certificate.
Generate a key and CSR
To generate a key and CSR for a custom SSL certificate:
- Go to the Apps page in the dashboard and click on the name of the app.
- Click on SSL.
- Click on Add a custom SSL certificate or generate a CSR.
- Paste your key and certificate into the SSL Key and SSL Certificate fields.
- Click on Update SSL Key and Cert.
Provide the CSR to the Certificate Authority that is issuing your certificate. The Certificate Authority will then issue your SSL certificate.
Redirect HTTP to HTTPS
To automatically redirect requests from HTTP to HTTPS:
- Go to the Apps page in the dashboard and click on the name of the app.
- Click on SSL.
- Click on Redirect HTTP to HTTPS.
The redirect will use a 301 Moved Permanently status code.
HTTP/3 for apps with SSL
If HTTP/3 is enabled for a server, all SSL-enabled apps on the server will support HTTP/3.
See how to enable enable HTTP/3.