Subject: SSL - Secure Your Site
The following message was sent by our staff regarding the above subject:
SSL (the https:// connection), secures your website connection through an encrypted connection via a (SSL) certificate and is highly recommended, especially for sites with user input and e-commerce.
* If you are using our new PHP 7 platform, you can now use free Let's Encrypt SSL certificates! *
///////
* Let's Encrypt:
- is free to use, but does require a Unique IP (+$5/month per domain)*
- designed to be hassle-free and automatic (CSR, Private Key, and all aspects of SSL are handled without user input!)
- uses 90 day, auto-renewing certificates
- saves money with the same level of reliable SSL
- is only available on our new platform (PHP 7) servers
- is available for primary hosting or individual domains on virtual and managed servers (no addon domains)
If you're interested, and your site meets the above requirements, please use the "SSL Certificate" -> Let' Encrypt SSL option in your control panel to get started.
///////
For SSL on our older servers, please see below.
* stop here if you're using Let's Encrypt! *
*** To comply with the latest PCI-DSS requirements and browser standards (as of March 2020), SSL websites will need to use our new PHP 7 servers with compliant versions of TLS and OpenSSL:
To avoid issues with SSL in the near future, clients not using the new platform are recommended to migrate (at no cost) as soon as possible.
See here for more information on our PHP 7 servers: https://webmasters.com/php7
**
Here are quick steps to request, purchase, and approve a new SSL certificate from our provider, GlobalSign.
From the Hosting control panel, go to "SSL Certificate"
SSL requires a unique IP to distinguish your site from the shared IP pool. ($5/mo each - pro-rated) * The Install page should notify you if you do not have a Unique IP *
1) Order the Unique (static) IP ( https://secure.webmasters.com/options ) *changing to the new IP will cause your site to go offline for up to 24 hours
Note: Unique IP for virtual or managed servers are not purchased through a form, but are manually added by support at client request.
2) Create a webmaster@ email box in "Email Manager" for the domain in question, i.e. webmaster@yourdomain.com (approval / SSL purchase emails are sent here)
3) globalsign.com and support@webmasters.com should also be added to your White List.
(Go to "Spam Filter" -> White List-> Add)
We're now ready to purchase SSL:
4) SSL Certificate -> Request CSR (default of 2048 is correct)
(A file will be created in a specific location in your website directory with meta code from GlobalSign and used to verify ownership.
(/.well-known/pki-validation/gsdv.txt))
5) Purchase Certificate ( https://webmasters.com/ssl )
You can order a 1 or 2 year (15% discount) SSL certificate.
*If you have a current SSL to renew, you can instead use https://webmasters.com/sslrenew
6) After processing, an approval email is sent to webmaster@ with instructions, and the link must be followed and approved. (if possible, we'll complete approval via HTTP method)
* We generally handle approval and installation, but instructions are included for reference. *
At this point it -can- take 1-5 days for the SSL to be issued, but it's -almost- always issued within the same hour after approval. If you've either not received an approval email or the SSL certificate has not been sent to you within the next 24 hours, please contact support with the domain name so that we can check on the status.
It should never take that long, and hopefully these steps will help prevent that.
7) Once the SSL is issued, it is then installed from "SSL Certificate" -> Install. (We usually handle this step, but it is included for reference)
a) The issued SSL certificate goes in the top box
b) The Private KEY (given in the Request CSR step) goes into the bottom box (this will be detected if available)
c) Click Install Trusted Certificate
The SSL is now installed, but requires an additional intermediate 'chain' certificate to verify with all browsers, etc.
d) Select [Root Chain] at the top of the same page
e) Choose "Yes" from the 'GlobalSign SSL?' option and the required certificate will be installed.
You're done.
The SSL certificate install is now complete.
It may take 5-10 minutes for your site to come online through https:// . If it does not, please let us know as it may require a restart of the Apache web server.
Please feel free to contact us again at any time if you need additional assistance. Thank you for contacting us.
Best regards,
WEBMASTERS.COM
Support Team |