SSL Certificate Setup in Webuzo

Install a Let’s Encrypt certificate

After issuing or renewing, confirm everything from the outside with the SSL test: chain, expiry, protocols, and hostname match, graded.

1. Log into Webuzo Enduser Panel.
2. Go to SSL → Let’s Encrypt.
3. Select your domain from the dropdown.
4. Click Issue Certificate.
5. Webuzo requests the certificate from Let’s Encrypt and installs it automatically. This takes 30-60 seconds.
6. Verify by visiting https://yourdomain.com: the padlock should appear.

DNS must be pointing at your server: Let’s Encrypt validates your domain by making an HTTP request to it. The domain’s A record must resolve to your server IP before requesting a certificate.

Auto-renewal

Let’s Encrypt certificates are valid for 90 days. Webuzo automatically renews them before expiry. Check the renewal cron is running:

crontab -l | grep letsencrypt

If no entry exists, add one manually:

# Add to crontab (run as root)
0 3 * * * /usr/local/emps/bin/php /usr/local/webuzo/webuzo.php --renew-ssl >> /var/log/webuzo-ssl-renew.log 2>&1

Install a custom certificate

For certificates from commercial CAs:

1. SSL → SSL Manager → Install SSL
2. Select the domain
3. Paste the private key
4. Paste the certificate
5. Paste the CA bundle/chain
6. Click Install

Force HTTPS

After installing SSL, redirect all HTTP traffic to HTTPS by adding to your .htaccess:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

Or enable it from Webuzo Admin Panel → Web Server → Force HTTPS (if available for your web server type).

Troubleshooting

“Domain not found” error during issuance DNS hasn’t propagated. Check with dig yourdomain.com A +short and wait for the correct IP to show.

Certificate issued but site still shows HTTP The .htaccess redirect may be missing. Add the redirect above.

Mixed content warning Some resources on the page load over HTTP. Update hardcoded http:// URLs to https:// or use a relative URL (//yourdomain.com/image.jpg).