Enable SSL Let’s Encrypt

Order now | Download | FAQ

For the solution to work properly, you must activate the automatic handling of SSL certificates through the Lets Encrypt service.

Requirements

• The active domain name that resolves the server's IP address (IPv6 and IPv6)
• Port 80 and 443 are always open, and not busy with another process

In order for the system to start the procedure for obtaining an SSL certificate from Let's Encrypt, it is necessary to: 

1. In the configuration file, enable the use of SSL and enter the domain name.

nano /etc/puqvpncp/puqvpncp.conf 

LetsEncrypSSL=yes
Domain=XXXXXX.XXX

2. Restart the PUQVPNCP service

service puqvpncp restart

After these steps, the first time you connect to the server via the https protocol, the system will request an SSL certificate and automatically renew it if necessary.

ATTENTION. After activating SSL, the system will only work in the https protocol on port 443.
A redirect is also set from port 80 to port 443.

To connect to the server via the https protocol, use only the domain that was set in the configuration file.
Otherwise, you will get an error that SSL is not working correctly.