Setup SSL with Let's Encrypt

Let's Encrypt is designed to provide free, automated, and open security certificate authority (CA) for everyone. It enables website owners to get security certificates within minutes. This means everyone gets a safer web experience.

1. You may want to apply for your valid domain and point to your server first.
2. Visit https://certbot.eff.org/ and choose your system for certbot command.
3. We use CentOS7 as example.

   yum install certbot
   certbot certonly 

4. Then start entering your email, domain and valid web root, e.g. /usr/local/lsws/DEFAULT/html/
5. Then you should see Congratulations! if cert apply success.
6. Verify cert file exist
   

   ll /etc/letsencrypt/YOUR_DOMAIN/

   • cert.pem
   • chain.pem
   • fullchain.pem
   • privkey.pem

Access LiteSpeed Web Server Web admin → Configuration → Listeners → SSL

• Private Key File: /etc/letsencrypt/live/Your_Domain/privkey.pem
• Certificate File: /etc/letsencrypt/live/Your_Domain/fullchaim.pem
• Chained Certificate: Yes
• CA Certificate Path:
• CA Certificate File:

• Private Key File: /etc/letsencrypt/live/Your_Domain/privkey.pem
• Certificate File: /etc/letsencrypt/live/Your_Domain/cert.pem
• Chained Certificate: No
• CA Certificate Path: * CA Certificate File: /etc/letsencrypt/live/Your_Domain/chain.pem ===== How to verify SSL===== ==== Online SSL testing tool==== ssllabs ====Simple Browser check==== If cert valid, you will see Secure** in green color

You can also click it to view Connection status