How to Install an SSL/TLS Certificate In LiteSpeed

The following instructions will guide you through the SSL installation process on LiteSpeed. If you have more than one server or device, you will need to install the certificate on each server or device you need to secure. If you still have not generated your certificate and completed the validation process, reference our CSR Generation Instructions and disregard the steps below.

What You’ll Need

1. Your server certificate

This is the certificate you received from the CA for your domain. You may have been sent this via email. If not, you can download it by visiting your Account Dashboard and clicking on your order.

2. Your intermediate certificates

These files allow the devices connecting to your server to identify the issuing CA. There may be more than one of these certificates. If you got your certificate in a ZIP folder, it should also contain the Intermediate certificate(s), which is sometimes referred to as a CA Bundle. If not, download the appropriate CA Bundle for your certificate.

3. Your private key

This file should be on your server, or in your possession if you generated your CSR from a free generator tool. On certain platforms, such as Microsoft IIS, the private key is not immediately visible to you but the server is keeping track of it.

Installation Instructions

1. Add a new Listener

In your LiteSpeed WebAdmin console, click Listeners and then Add.LiteSpeed Step2

2. Configure the new Listener

Use the following Address Settings to configure the newly created Listener:

  1. Listener Name – Enter the internal friendly name for your Listener.
  2. IP Address – Select Any from the dropdown unless you want to bind the Listener to a particular CPU. In that case, enter the unique IP-port combination.
  3. Port – Most HTTPS connections are managed through port 443 by default. However, if you have other Listeners operating on that port, this may cause an issue and require you to use another port such as 8443.
  4. Secure – Select Yes.
  5. Notes – Add any internal notes that will help you distinguish the Listener in the future.
  6. Click Save.

LiteSpeed Step3

3. Select your Listener

From your WebAdmin console, click Listeners and select your Listener Name (for our example, we chose to name the Listener “SSL”).LiteSpeed Step4

4. Select the SSL tab

Once you’re on the SSL tab under your newly created Listener, click the Edit button on the SSL Private Key & Certificate section.LiteSpeed Step5

5. Configure the filepaths

Use the following instructions to properly configure your Certificate filepaths as shown below:

  1. LiteSpeed Step6Private Key File – This is the path to your private key that was previously saved on your directory during the generation process via OpenSSL.
  2. Certificate File – This is the path to your server certificate that the CA sent you. You should already have this saved locally or in your server directory.Only complete one of the two options below to successfully install the intermediate certificates:
  3. CA Certificate Path – This is the path to the intermediate certificate “file” that the CA sent you.
  4. CA Certificate File – This is the path to the “directory” holding the intermediate certificates that the CA sent you.
  5. Click Save.

6. Return to the SSL tab

Once you’re back on the SSL tab under your Listener, click the Edit button on the SSL Protocol section. LiteSpeed Step7

7. Select “Protocol Version”

For Protocol Version, select TLSv1.1 and TLSv1.2 and then click Save. LiteSpeed Step8

8. Select your Listener

Now, from your WebAdmin console, click Listeners and select your Listener Name (e.g. SSL).LiteSpeed Step9

9. Select the General tab

Under your selected Listener, select the General tab and click the Add button on the Virtual Host Mappings section.LiteSpeed Step10

10. Select the Virtual Host

In the Virtual Host Mappings section of your General tab, select the Virtual Host you want to connect the Listener to from the drop-down menu.

11. Enter all the Domains(s)

Once you have the appropriate Virtual Host selected, enter all of the Domains that connect to your vhost(s) – this tells OpenLiteSpeed where to send traffic this listener picks up – and click Save. LiteSpeed Step12Note 1: If you have multiple domains in the certificate that connect to the vhost, use a comma “,” to separate the additional domains. Note 2: If you have one vhost and configured the server to disregard other vhosts, you can enter an asterisk “*” as the domain. 

12. Restart

Navigate to your Dashboard by selecting “Dashboard” from the left-hand side menu. Once on your Dashboard, click the green Graceful Restart button.LiteSpeed Step13

Congratulations! You’ve successfully installed your SSL certificate! To check your work, visit the website in your browser at https://yourdomain.tld and view the certificate/site information to see if HTTPS/SSL is working properly. Remember, you may need to restart your server for changes to take effect.

To check your server’s configurations more thoroughly, use our SSL Checker Tool or contact our Customer Experience Department for additional assistance.

Updated on

Was this article helpful?

Related Articles