How to Install an SSL Certificate for an OpenLiteSpeed Website with LetsEncrypt

[@mohammadalimohammadi9747]

Thank you Tony. Can you teach or give any resources how to set SSL for multiple sites?

[@dev.dunglv5077]

Thanks for the videos. i did install the ssl cert on openlitespeed and it's work fine for the domain But how can i install and apply an wildcard ssl cert LetsEncrypt for all my sub domain. Can you show me how?

[@themaster3216]

What if we don't have access to Cyber Panel?

[@leonarddlima9763]

What if we want to deploy a nodejs backend running on a particular port of the server? How will the configuration look like with SSL installation?

[@denisjean-bastien1253]

Thank you ! And for renew the certificat ?

[@sturmfabrik]

Hi Tony, looks like certbot renew is not able to do it's work when deleting 80 Listener... just fyi...

[@TonyTeachesTech]

What do you mean "deleting 80 Listener"?

[@sturmfabrik]

@@TonyTeachesTech Hi Tony, in the late Part of your Video @~ 09:35, you are saying that if the Admin don't want Webspace to respond to Port 80 Requests you may delete the Port 80 Listener in Openlightspeed. Thats right,... but... i just want to say that certbot is verifying something on Certificaterequest at renewal on Port 80. Calling the http Version of the Domain. So a Certbot renew -n -q isn't working anymore on renewal... and if configured on crontab you may not notice this...

[@ThriftyTony]

@@sturmfabrik Oh okay gotcha. Thank you for clarifying and pointing that out Christian!

[@sturmfabrik]

​@@ThriftyTony My Pleasure... you do a really great job!!! Thank you for your efforts and this KZbin-Channel!!! It's really great!

[@TonyTeachesTech]

@@sturmfabrik Appreciate the kind words 😀 Thanks for watching!

[@indian3960]

HEY TONY, I see if I do this process you say in 9:30 my domain is not redirecting to https and get a 404 error. I also do purge all cache, graceful restart, service lsws restart from the terminal and also delete browser cookies and cache but nothing changed ... so please guys recheck it... if any problem occurred re-enters it...

[@stevemeacham6880]

Correct. Don't remove the mapping from the Listener for port 80. That will prevent the server from answering on port 80, therefore the rewrite is never used.

[@indian3960]

@@stevemeacham6880 ;)

[@TonyTeachesTech]

Yes in retrospect, this was not good advice to remove the HTTP listener for port 80.

[@AKGInfotech]

Thanks Tony - works perfectly for me. God bless you.

[@TonyTeachesTech]

Glad to help

[@faruqueahamedmollick3278]

I am trying to install SSL on my second site. But it is saying This port is already in use for port 443. How to solve this? Please help...

[@direito-de-familia]

Congratulations! The only video that solved my problem. Right to the point. Keep going with the nice job.

[@TonyTeachesTech]

Thanks, will do!

[@markus8658-s2d]

Hi Tony great video ! For me a little bit too technical (be a tech noob). I tried setup a Linode vps with cyberpanel but the ssl who is issue don cyberpanel is self signed and I not get it to work on my sites, all browsers blocked that site with "unsecure". So create ssl within cyberpanel it not creates an Let's Encrypt cert it creates an self signed cert, most people not get this ssl cert work on their sites.

[@Anime-yw8pv]

hi Tony. i need to enbel ssl on my dashbord openlitespeed if you can help i well thankful for you

[@IlanPerez]

can you explain how load my own ssl that i have bought elsewhere....

[@TonyTeachesTech]

I haven't personally done that with OLS yet

[@GiancarloDiamond]

so niche i subscribed becasue of this and the other 2 fab videos!

[@yannainglynn4972]

Thank you. I always watch your videos.

[@TonyTeachesTech]

I really appreciate that

[@jesusidev]

Thanks for the videos. How do you have litespeed point to a domain so that you don't have to type in the ip every time.

[@soundarahari]

Create a A record in DNS Panel

[@TonyTeachesTech]

Yes @Soundarahari P is correct. You must create an A record for your domain name that points to the IP address of your server. You typically do this where you bought your domain name from.

[@jesusidev]

Great! Thanks, I thought it would be difficult since it's pointing to a point that is not 8080

[@Vende-se]

can you teach me why you always us lets encript to generate SSL, its not better dont use lets encript and generate SSL on full setting on cloudflare only without SSL from let encript ? im confuse about the use of lets encript and cloudflare ssl, wich one is the best ? and why ?

[@TonyTeachesTech]

I use Let's Encrypt because it's reputable and free. I'm not familiar with Cloudflare's SSLs, but I would think that is equally as good as Let's Encrypt

[@muncherelli]

If you use CloudFlare, you don't necessarily need to use a Let's Encrypt Certificate, but you can. If you don't want to use LE (and certbot), you can generate a "CloudFlare Origin Certificate" (found in the CloudFlare dashboard under SSL/TLS > Origin Server). Save the text files as cert.pem and key.pem somewhere on your server, and add them to OpenLiteSpeed the same way Tony added the LE SSL paths in his video. Just make sure you save them to a non-public directory. Anyways, you can use LE, CloudFlare Origin Certificate, or a DV/EV/whatever certificate you've purchased from somewhere else. None of them are "the best", it just depends what you are hosting in your specific case since each provider/cert type has its own unique pros & cons.

[@alvin942]

You exactly are saviour to me.

[@TonyTeachesTech]

:)

[@haianjsc2319]

If I have 2 websites and I used 2 Letsencrypt certificates, the way you guided, what is right?

[@TonyTeachesTech]

Yep

[@mmlnv2036]

I get challenge failed for domain. Any idea why ?

[@TonyTeachesTech]

Do you have your DNS A record pointing to the IP address of the server?

[@RandomFocus143]

port 443 on my centos8 server is not listening even after setting it up in openlitespeed. added 443 in firewall permanently too. but no success. please help

[@TonyTeachesTech]

Hmm, I don't know what is wrong

[@RandomFocus143]

@@TonyTeachesTech thank you Tony, it was my mistake of ssl keys which i fixed after watching your video. Thank you👍 Can you please make a video on the Virtual Host Templates in OpenLiteSpeed with ssl? I tried it myself and it didn't work for SSL.

[@vishnu_deepak_]

After running the command it showed an error "Requested domain is not a FQDN because it contains an empty label"

[@TonyTeachesTech]

I don't know. I have not seen that error before

[@RaviKumar-fx5dz]

How can we renew certbot SSL after 3 months? is there any options to auto renew?

[@TonyTeachesTech]

I see you found the video :) kzbin.info/www/bejne/gGevhYCplpqVhq8

[@RaviKumar-fx5dz]

@@TonyTeachesTech yes I got that. Thanks

[@mabhishek1975]

Thanks for update on SSL on OLS.

[@TonyTeachesTech]

You bet 😀

[@levinfo]

You are awesome! How do we add SSL for multiple virtual hosts for different domains? As we can only add one certificate file to OLS server.

[@TonyTeachesTech]

Let's Encrypt/certbot looks at your web server configuration file in order to generate SSL certs. As long as you have this configured, you can execute the certbot command multiple times for multiple domains.

[@IlanPerez]

I have added the rewrite rules to my litespeed admin portal and after reset they dont seem to take effect. Is there a way to check this? Is there a file to look at?

[@TonyTeachesTech]

Not that I'm aware of

[@davesomeone4059]

I was having trouble before finding this video and now my homepage won't load because of too many redirects. Good news is SSL works everywhere else and the rest of the site works great.

[@TonyTeachesTech]

Great to hear Dave!

[@mohammadsultanalmamun9980]

Thanks a lot for the very clean informative videos!

[@TonyTeachesTech]

Glad you like them!

[@GiancarloDiamond]

saves me the clutter of having the n'th plugin in my collection :))))) wordpress is based on you want more features you install x plugins...

[@syedwajahatali2020]

#TonyTeachesTech pls tell how to find Virtual Host Name to give its name in this directory coz in my case it is showing "Does not exist or is not a directory" this error. I installed wordpress through Cyberpanel and I am having Openlite speed server. Pls help

[@TonyTeachesTech]

I'm only familiar with the default directory for CyberPanel

[@syedwajahatali2020]

@@TonyTeachesTech brother can u make a video on if we make a website from cyberpanel then automatically in Openlitespeed Dashboard we see two Virtual Hosts so in this case How to Install SSL Certificate through Certbot.

[@indian3960]

Man, where are the commands? and why you do not put the real link of that post related to that video? and, what happened after 3 months... does it auto-renew?

[@TonyTeachesTech]

There is not blog post for this video. I put the command and code snipped in the description. Also a link to a video that explains how to automatically update your SSL with cron. LMK if you have questions

[@indian3960]

@@TonyTeachesTech ;)