Category: SSL & HTTPS
How to add a TXT record to DNS
You will need to add a so-called TXT record to continue DNS verification while generating an SSL certificate with Let’s Encrypt by Really Simple Security. We will explain how this is done, in some cases your hosting environment might look different, but the responding fields should be similar. If Really Simple Security shows the following screen… Go to your Hosting Provider and navigate to the “DNS zone” or “DNS settings” tab, which will display a list of all of your
How to generate a Let’s Encrypt SSL certificate with Really Simple Security
You can use Really Simple Security to generate (and install) a free Let’s Encrypt SSL certificate on your WordPress website. Note: your hosting provider may prevent the manual installation of a third-party SSL certificate. Most commonly when the host also offer free SSL generation directly in their Hosting Control Panel. Some hosts only provide you with paid SSL certificate options. The Let’s Encrypt Wizard Really Simple Security skips the Let’s Encrypt Wizard if a valid SSL certificate is detected. If,
MOZILLA_PKIX_ERROR_REQUIRED_TLS_FEATURE_MISSING
MOZILLA_PKIX_ERROR_REQUIRED_TLS_FEATURE_MISSING This is an uncommon error which can occur when there’s an issue with OCSP stapling on your webserver. It happens when OCSP stapling is required, but not available. We recommend to contact your hosting provider about this issue, they will be able to enable OCSP stapling which will fix the issue. The other reason this error can occur is if you are behind a proxy. If that is the case, you can try the following to access the site:
Protect SSL generation directories
This warning appears when your SSL certificate files aren’t properly protected. This happens when Really Simple Security has created an ssl/certs and ssl/keys directory in your websites root folder. The public certificate (*.crt) being available is not an issue, it’s the private key (*.key) file that needs to be protected. To fix this issue, you can modify the file permissions to 644 for the .crt file and 600 for the .key file. You can also ask your hosting provider to do this for
Installing SSL using shell functions
If you receive the following notice, while using Really Simple Security to install a Let’s Encrypt SSL Certificate: Your server provides shell functionality, which offers additional methods to install SSL. If installing SSL using the default methods is not possible, you can install the shell add on. Below, you will find the shell add-on to install the Let’s Encrypt SSL certificate with shell functionality. Why an add-on? Some anti-virus software trigger on shell functions when these files are scanned. Although