Hosting provider requires SSL cert and CA bundle


#1

Hi,

Super IT illiterate here…

My Hosting provider can offer a CSR cert in order to get a SSL cert from you. I have no idea how to get the SSL cert and the certbot makes no sense to me. Please help.

My domain is:www.life108.net

My hosting provider, if applicable, is: Afrihost

I can login to a root shell on my machine (yes or no, or I don’t know): haha yes but I am not allowed to install files (obviously because it’s shared)

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): Afrihost?


#2

Then it probably isn’t a root shell. :wink:

Do you see anything like “cPanel” when you’re logged into your Afrihost environment?

I’m afraid that with Afrihost things aren’t that easy. At least not as easy as Let’s Encrypt is intended to be used. From their webhosting FAQ:

Are there any extra costs involved in hosting a secure site (i.e. having a SSLcertificate)?

Yes, you’ll need to get a digital certificate from a Certificate Authority such as VeriSign or Thawte. This will be an additional cost over and above your hosting fee. Please contact us if you need to set up yourSSL certificate.

Let’s Encrypt is meant to be automated, i.e., when the lifespan of the certificate is almost over (the certificates are only valid for 90 days), it should be renewed automatically somehow, by the software used to get the certificate in the first place. But when you have to manually get the certificate (which is possible) and have to send it to your hosting provider somehow, that’s very cumbersome.

For example, you could use ZeroSSL to get a certificate. And somehow e-mail it to your hosting provider. But what your hosting provider should do, is enable AutoSSL in their cPanel control panel (if they’re using cPanel anyway). And if they’re not using cPanel, they should enable some other client in their control panel to let you get a Let’s Encrypt certificate with just a single click on a button.


#3

To re-affirm @Osiris’ response, you already have a certificate which is automatically installed and managed by cPanel AutoSSL, and you’ve had it since March 2018: https://life108.net/

You don’t need a Let’s Encrypt certificate. Just sit back and enjoy doing nothing.


#4

It’s nice to be surprised in this direction (that the hosting provider and the software it uses has already taken care of everything correctly and that users don’t have to do anything more). @Juanita, how nice that your hosting provider is doing well here.

Maybe you should encourage Afrihost to update their documentation to make clear that at least some groups of customers don’t have to do anything here, because it’s already being taken care of!


#5

Shjo, that is strange… I know I asked info about the SSL but didn’t purchase it… My site never had the https, it was always on my to-do list.

Even while speaking to Afrihost they made no mention about this. I was just speaking to an affiliate yesterday who asked about me getting an SSL.

How does that happen?

Anyway. Looks like all is good now.

Thanks for the help!


#6

No clue, but the hostname(s) of your site have got certificates issued since March 2018: https://crt.sh/?q=%life108.net

Mental note to self: first check if site has certificate already before starting a long reply which isn’t even helpful giving the circumstances :grimacing:


#7

Thank you so much for your help!