Skip to content
FlySIPFlySIP Docs

Install an SSL certificate for the web interface

Out of the box the panel uses a self-signed certificate, so browsers warn about it and API clients refuse it. This page installs a trusted certificate for an environment’s web address, either issued and renewed automatically by Let’s Encrypt or bought from a certificate authority (CA). Allow 15 minutes plus the DNS update time.

Before you start

Section titled “Before you start”
  • You have Administrator access to the environment.
  • You own a domain name for the panel, for example panel.example.com, and can edit its DNS records.
  • For Let’s Encrypt: TCP port 80 of the switch is reachable from the internet. The CA checks the domain over it, at issue and at every renewal.

Step 1: Point the name at the switch

Section titled “Step 1: Point the name at the switch”

  1. Create a DNS A record for the name, with one of the IP addresses assigned to the environment.

  2. Wait until the name resolves from outside your network:

    Terminal window
    dig +short panel.example.com

Result: the command prints the environment’s IP address.

Step 2: Add the certificate

Section titled “Step 2: Add the certificate”

Let’s Encrypt

Section titled “Let’s Encrypt”
  1. Open System Management → SSL Management → SSL Certificates and click Add.
  2. Enter a Name, for example panel.
  3. Enter Common Name: the DNS name from step 1.
  4. Select Type Issued by LetsEncrypt.org and Use Domain Web/HTTPS.
  5. Click Save & Close.
Screenshot "operations/ssl-certificates" has not been generated yet — see scripts/screenshots/screens.yml.

A certificate from your CA

Section titled “A certificate from your CA”
  1. Open System Management → SSL Management → CSR Generator.
  2. Enter Common Name (the DNS name), Organization, Department, City, State, Country and Key Size, and an address in Send to E-Mail.
  3. Click Generate. The panel e-mails you a certificate signing request (.csr) and a private key (.key). Keep the key secret.
  4. Send the .csr to your CA and complete its validation. The CA returns the certificate (.crt).
  5. Open SSL Certificates, click Add, enter Name and Common Name, select Type Uploaded and Use Domain Web/HTTPS.
  6. Under Advanced Parameters, paste the certificate into Certificate and the key into Key. Add the CA’s intermediate certificates under the server certificate, if the CA sent any.
  7. Click Save & Close.

Result: the certificate is listed with its Expiration Date.

Step 3: Use it for the web interface

Section titled “Step 3: Use it for the web interface”
  1. Open System Management → System Parameters → Web Interface.
  2. In the Web Interface section, enter Web Address: the same DNS name.
  3. Select the certificate in SSL Certificate.
  4. Click Save.
Screenshot "operations/web-interface" has not been generated yet — see scripts/screenshots/screens.yml.

Result: the switch installs the certificate and restarts the web server within about five minutes.

Step 4: Test it

Section titled “Step 4: Test it”
  1. Open https://panel.example.com in a browser. The page opens without a warning.
  2. Click the padlock and check that the certificate is issued for your name.

What’s next

Section titled “What’s next”