Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
litespeed_wiki:config:admin-ssl [2017/10/24 12:43]
Lisa Clarke [LSWS 5.2+]
litespeed_wiki:config:admin-ssl [2025/06/03 18:28] (current)
Lisa Clarke Redirect to new Documentation Site
Line 1: Line 1:
-====== How To Configure SSL For LSWS Web Admin GUI ====== +~~REDIRECT>​https://docs.litespeedtech.com/lsws/webadmin/~~
-**As of LiteSpeed Web Server v5.2, self-signed SSL certificates are automatically created for the Web Admin GUI.**  +
- +
-The following instructions are useful if an older version of LSWS is being used, a different self-signed certificate is wanted, or a non-self-signed certificate is needed. +
- +
-===== Install/​Change Certificates ===== +
-==== LSWS 5.2+ ==== +
-LSWS reads the following files for its WebAdmin SSL configuration: +
-  * Certificate File: ''​/usr/local/​lsws/​admin/​conf/​cert/​admin.crt''​ +
-  * Key File: ''/​usr/​local/​lsws/​admin/​conf/​cert/​admin.key''​ +
-  * CABundle: ''/​usr/​local/lsws/admin/conf/​cert/​admin.cabundle''​ +
- +
-This configuration can be changed at any time by replacing these files directly.\\ +
-Make sure the files are owned by ''​lsadm:​lsadm''​. This can be achieved by running the following command: +
-<​code>​ +
-chown -R lsadm:lsadm /​usr/​local/​lsws/​admin/​conf/​cert/​* +
-</​code>​ +
-Perform a graceful restart after making any changes. The changes will be applied, and Web Admin GUI will begin using the newly-supplied certificate.  +
- +
-==== All Versions ==== +
-The following will work for all versions of LSWS via the Web Admin GUI. +
-  - Log in to the Web Admin GUI and navigate to Web Console -> Listeners. +
-  - Click View/Edit for the adminListener\\ \\ {{ :​litespeed_wiki:​config:​admin-ssl-1.png?​nolink&​800 |}} +
-  - In the General tab, click edit and change Secure from No ->Yes. Then hit save.\\ \\ {{ :​litespeed_wiki:​config:​admin-ssl-3.png?​nolink&​800 |}} \\ +
-  - Click on the SSL tab, hit edit under the SSL Private Key & Certificate section, and add the following:​ +
-    * **Private Key File:** ''</​path/​to/​ssl/​key_file>''​ +
-    * **Certificate File:** ''</​path/​to/​ssl/​cert_file>''​ +
-    * **Chained Certificate:​** Yes +
-    * **CA Certificate File:** ''</​path/​to/​ssl/​ca_bundle>''​\\ \\ **Note:** Make sure that these files can be read by lsadm. If not, run chown lsadm:ladm on each file so that the Web Admin GUI can read these files. \\ \\ {{ :​litespeed_wiki:​config:​admin-ssl-4.png?​nolink&​800 |}} \\ +
-  - Save and perform ​ a graceful restart of the web server. The Web Admin GUI should now be using the non-self-signed certificate.\\ \\ {{ :​litespeed_wiki:​config:​brotli:​brotli-5.png?​nolink&​800 |}} \\ {{ :​litespeed_wiki:​config:​brotli:​brotli-6.png?​nolink&​800 |}} +
  • Admin
  • Last modified: 2017/10/24 12:43
  • by Lisa Clarke