How to Setup HTTPS/SSL Certificates

Please see this page for help with Purchasing an SSL Certificate. Of course, we do include support for you to add your SSL Certificates to your account and set them up with your hosted domains/sites.

Specifications

Certificate Requirements

For SSL Certificates to be compatible with a Bravenet-hosted website, they must be x509 certificates, in the .pem format. This includes Let's Encrypt - Free SSL/TLS Certificates.

You will need to ensure that you have the domain registered (either with us, or as an external domain) before you can load the certificate. You will also want your certificates to cover both www.yourdomain.com and yourdomain.com (most SSL providers will include yourdomain.com if you certify www.yourdomain.com). You will also need a Bravenet Pro account to utilize SSL Certificates.

Server and User Considerations

On the server-side, Bravenet HTTPS protocols are facilitated/provided through a reverse proxy powered by Nginx.

End-user browsers must support SNI (Server Name Indication) to be compatible with SSL Certificates. By default, most browsers provide SNI support, but some do not.

Intermediate Certificates

SSL Certificates purchased through Bravenet include an appropriate intermediate certificate included in the SSL Certificate itself.

The implementation of intermediate certificates will vary between every certificate provider, and so it is difficult if not impossible to provide instructions that will work for configuring the intermediate certificate in every other circumstance. An intermediate certificate is only necessary for some end-users, yet the SSL Certificate itself can work fine without the intermediate component in many environments/browsers/configurations.

Of course, to ensure your site is as fully compatible with HTTPS protocol and possible end-user/browser configurations as possible, you should include the intermediate certificate if it is provided/encouraged by the certificate provider.

The intermediate certificate is appended to the SSL certificate itself, so that when end-users connect to the site they download both the certificate and the provider's intermediate certificate. The intermediate ticket is essentially a packet of additional certificate authentication that can be (optionally) included with the SSL certificate.

Setup the SSL Certificate

Bravesites Site Builder:

Purchasing a SSL Certificate:

  1. Log in to your Bravenet account.
  2. Click the "Site Builder" tab.
  3. Click "Add SSL" beside the website in question.
  4. If you have not yet purchased your SSL Certificate click "Purchase an SSL Certificate".

Installing a SSL Certificate:

  1. Log in to your Bravenet account.
  2. Click the "SSL" tab at the top of the page.
  3. Click "Download" next to your domain.
  4. Click "Download Certificate File" (*.pem) and "Download Key File" (*.key)
  5. Click the "SiteBuilder" tab at the top of the page.
  6. Click "Add SSL".
  7. This is where you upload your key (*.key) and certificate (*.pem) files.
  8. Click the button "Upload and Activate SSL"

Bravehost FTP Hosting:

  1. Click to the Web Hosting tab from the top of the page.
  2. Click on the SSL Certificates button.
  3. If you were provided the certificate as separate files, click the Upload Files radio button.
    1. Click Choose File by Certificate, and navigate to the certificate file (extension .pem or .crt usually).
    2. Click Choose File by Private Key, and navigate to the key file (extension .key usually).
  4. If instead you have the cert as plaintext, select the Paste Text radio button.
    1. Click into the Certificate text field, and paste the certificate code, including and starting at the line -----BEGIN CERTIFICATE----- and ending with and including -----END CERTIFICATE-----
      1. If have an intermediate certificate, you insert it here:
      2. With the certificate code inside the text field, click to the end of the pasted certificate code.
      3. Copy your intermediate certificate code, including and starting at the BEGIN and END certificate lines.
      4. Paste this intermediate certificate code immediately beneath the (primary) certificate code, within the same text field. So that the next line immediately after the first END CERTIFICATE line, is the second BEGIN CERTIFICATE line.
    2. Click into the Private Key text field, and paste the key code, including and starting at the line -----BEGIN RSA PRIVATE KEY----- and ending with and including -----END RSA PRIVATE KEY-----
  5. Enter the certificates password if there is one. If not, leave the field empty.
  6. Click on Add Certificate to finalize the certificate.


Let's Encrypt Certificates

We now offer the ability to obtain and install an SSL certificate free of cost from Let's Encrypt. You can obtain and install a Let's Encrypt SSL certificate for a website in your Bravenet account using this guide. Let's Encrypt certificates are auto-renewed every three months. We will add a DNS entry to your domain for verification and auto-install the certificate once it's approved.

For more information about Let's Encrypt please see: https://letsencrypt.org/


Note: You must have your nameservers set to Bravenet in order to install a Let's Encrypt certificate with us using the steps below. Please note, if you have recently updated your nameservers to Bravenet, you may need to wait up to 24-72 hours for this change to fully propagate before attempting to install a Let's Encrypt certificate.

Setting up a Let's Encrypt SSL Certificate

Bravesites Site Builder:

If your website is found under the 'Site Builder' section in your account, please use the following instructions to obtain & install the certificate:

  1. Replace "example.com" with your domain name in the following link. https://manage.bravehost.com/lets_encrypt/new?domain_name=example.com
  2. While logged into Bravenet.com, paste this updated link into your browser.
  3. Click 'Continue' to proceed with the verification process (Note: You must have your nameservers set to Bravenet to continue. We will verify your domain via an automatic DNS verification method which requires access to your domain's DNS records).
  4. You may see a message advising you to refrain from altering your DNS records for the next 24 hours, click 'Proceed' if you agree and wish to continue.

Bravehost FTP Hosting Websites:

If your website is found under the 'Web Hosting' section in your account, please use the following instructions to obtain & install the certificate:

  1. In your Bravenet account, click on the 'Web Hosting' tab.
  2. Click 'Manage' next to the website you would like to install an SSL certificate for.
  3. Under "Security", select 'Let's Encrypt'.
  4. Click 'Continue' to proceed with the verification process (Note: You must have your nameservers set to Bravenet to continue. We will verify your domain via an automatic DNS verification method which requires access to your domain's DNS records).
  5. You may see a message advising you to refrain from altering your DNS records for the next 24 hours, click 'Proceed' if you agree and wish to continue.


After following the steps above, your Let's Encrypt SSL certificate order is now created. Let's Encrypt certificates are auto-renewed every three months. We will add a DNS entry to your domain for verification and auto-install the certificate once it's approved. Please note this may take up to 24-48 hours to process due to DNS propagation delay times. You can view the status of your new SSL certificate from the 'SSL' tab found in your Bravenet account.

Retrieved from "https://wiki.bravenet.com/index.php?title=How_to_Setup_HTTPS/SSL_Certificates&oldid=7443"