This article will explain how to add an SSL Certificate from the free Let's Encrypt Certificate Provider with GridPane using one of our DNS Api integrations. This will allow your site to be served by the encrypted HTTPS protocol, and your visitors will also benefit from the speed increased enabled by HTTP2 which only works via HTTPS.
Using the DNS Api integration method requires your domain to be managed by one of the a DNS management services we GridPane integrates with. We currently support two of the biggest DNS management services:
Using the DNS api integration method does not actually require any DNS records to point to the IP of the server hosting the site, which makes it perfect for provisioning SSLs during migrations or for testing before DNS changeover.
GridPane does not enable/disable SSL for the site, but rather it manages SSL on a per domain basis for each domain attached to a site. This means SSL management is done through the domains tab.
In this Knowledge Base article we will use a site's primary domain to demonstrate, however the same functionality and process is true for any added Alias and Redirect domains.
Step 0. Sign up for an account at a DNS Provider.
To use a DNS Api integration to provision an SSL with GridPane, you will need to have an account with one of the supported DNS providers.
If you haven't already you can sign up here:
Step 1. Store your DNS Provider API Keys in GridPane
Copy your Cloudflare API credentials
Login in to your Cloudflare account and add a site to be managed or select an already managed site, then go to the overview page.
Then find the API section near the bottom of the page on the right section of the page.
Click Get your API token
In the API section, copy your account email address from the Communication tab.
Then Click the API Tokens tab, anc click View for the Global API Key
Copy your API Key
Copy your DNSMadeeasy API credentials
Log in to your DNSMadeeasy account and then go to the account information page.
Copy the API Key and API Secret from the bottom of the account information page.
Enter your DNS Service API credentials into your GridPane settings
Navigate to the your GridPane Settings page and DNS Providers section
Enter your API credentials in their respective input fields and click Create
Your credentials will now be saved in your GridPane settings.
If you want to edit your credentials, to change, update or delete them you can use the buttons in each panel.
Then pencil icon is for updating.
If you are using Custom/Vanity nameservers at your DNS provider
If you are using custom/vanity nameservers at your DNS provider, you will need to add these to your GridPane DNS API settings for that provider.
Click on the Nameserver Domain accordion dropdown for your DNS provider
You will only need to enter the root domain of your namesevers. So if your nameservers are ns1.gridpane.com and ns2.gridpane.com then you will add gridpane.com and click create.
Step 1. Go to the Sites Section of the GridPane Control Panel
Click on the sites link in the GridPane main menu to go to the Sites management page.
Step 2. Open the Site Customization Panel for your Active site
In the Active Sites panel, click on the domain in the URL column to open the Site Customization pop up box for the site you wish to update.
Step 3. Ensure Domain Api Integration is set to Full
Open the domains manager tab of the site customizer
If the API Integration of the domain you wish to enable an SSL for is set to None then click on the grey None box
This will open a modal window where you can choose either Cloudflare Full or DNSME Full to use DNS API domain verification for your SSL provision
Once you have selected the DNS API Full integration it should show in a green box on the domain row.
Step 4. Enable SSL
Locate the SSL toggle for the domain that you wish to provision an SSL for
Toggle it on
GridPane will begin provisioning SSL for your site's domain. You will see Notifications pop up in the top right corner of your browser as the SSL attempts progress.
Enabling an SSL can take some time, especially when using the DNS API method. Expect the SSL attempt to take several minutes.
You can keep track of the notifications as they inform you about the progress of the SSL attempt. Alternatively, you can check the SSL provision log, available from the logs tab of the site customizer. The SSL provision attempt outputs every step of the process to the log.