{"id":2873,"date":"2018-06-12T21:00:58","date_gmt":"2018-06-12T15:30:58","guid":{"rendered":"https:\/\/ravi.rajiniravi.com\/blog\/?p=2873"},"modified":"2018-06-16T17:03:59","modified_gmt":"2018-06-16T11:33:59","slug":"lets-encrypt-ssl-for-your-website","status":"publish","type":"post","link":"https:\/\/ravi.rajiniravi.com\/blog\/2018\/06\/lets-encrypt-ssl-for-your-website\/","title":{"rendered":"Let’s Encrypt SSL for your website"},"content":{"rendered":"

The entire web is moving to HTTPS encryption thanks Google announcing<\/a> that starting July, with Chrome 68, all HTTP sites will be marked as \u201cnot secure\u201d. They had earlier slightly up-ranked sites<\/a> with HTTPS to nudge adoption of encryption which seems to have worked to a certain extant. There is of course, the highlighting of unencrypted forms by almost all browsers.<\/p>\n

This site is hosted on BigRock which itself resells certificates<\/a> from Rs.1,425\/year (+tax) and costs as much as the hosting itself! If you don’t want such an expensive solution to begin SSL journey with, there is Let\u2019s Encrypt<\/a>. Let’s Encrypt gives free 3 month certificates that is as good as the best. If you are running on a Linux hosting plan and have CPanel access, here are the steps to set up SSL on your site.<\/p>\n

    \n
  1. Generating a Private Key\n
      \n
    1. Login to cPanel on your Hosting service<\/li>\n
    2. In the Security<\/strong> section, click on SSL\/TLS Manager<\/strong><\/li>\n
    3. Under Private Keys (KEY)<\/strong>, click on Generate, view, upload, or delete your private keys<\/strong><\/li>\n
    4. Set the Key Size to 2,048 bits<\/strong><\/li>\n
    5. Description can be blank; or name it if you want to identify the private key easily (helpful if you have multiple sub-domains)<\/li>\n
    6. Click on Generate <\/strong>to generate the Private key <\/strong>and keep it handy
      \n<\/strong><\/li>\n<\/ol>\n<\/li>\n
    7. Generate a Public Key (Certificate Signing Request)\n
        \n
      1. Return to SSL Manager<\/li>\n
      2. Under Certificate Signing Requests (CSR)<\/strong>, click on Generate, view, or delete SSL certificate signing requests<\/strong><\/li>\n
      3. Select the Key you\u2019ve generated (the name you gave in 1.5 above helps)<\/li>\n
      4. Enter your domain name for which you\u2019d like to install SSL\n