NOTE: This article is written for our Classic Cloud Control Panel. You can access this interface from the New Cloud Control Panel by clicking your username in the upper-right of the control panel and choosing the previous control panel from the menu.
Secure Sockets Layer (SSL) is an encryption technology that protects your visitors' private information while it's in transit via the Internet.
Think of it like this. You're asking your site's visitors to divulge personal and business information. They need to trust you. They have to know that their data is secure from eavesdropping, tampering and even phishing attacks. And the more they trust you, the more likely they are to complete forms, purchase items and share valuable information online. SSL certificates let them know that they can confidently share their data with you.
How does SSL work? Some applications that are configured to run SSL include web browsers like Internet Explorer and FireFox, email programs like Outlook, Mozilla Thunderbird, Apple Mail.app, and SFTP (secure file transfer protocol) programs, etc. These programs are automatically able to receive SSL connections.
Adding SSL to a website on Cloud Sites is a quick and simple process.
In this article we will discuss the following:
What types of SSL Certificates can I use on Cloud Sites?
SSL certificates installed on Cloud Sites have certain requirements in order to be installed correctly.
The primary certificates supported are:
Cloud Sites also supports the following chained certificates.
NOTE: We do not support EV certs
In addition to those previously mentioned, the Rackspace Cloud’s Support team can also install the following certificates.
You will still need to generate the CSR via the Control Panel and purchase the certificate from the third-party vendor.
After you receive the certificate, contact a member of the support team and provide the certificate to be installed.
NOTE: At this time, any other certificates are not currently supported. EV certificates, Multi-Domain or Wildcard certificates are also not supported. We are no longer supporting ANY self-signed certificates.
How do I install a SSL Certificate on my website?
NOTE: You can begin this process before you purchase your SSL certificate.
This will generate your CSR (certificate signing request). With the CSR ready for use, you can proceed to purchasing a certificate!
Purchasing a Certificate
Next, you will need to purchase your SSL certificate. SSL certificates are available from a number of third party sources. Some recommended sellers are RapidSSL, Geotrust, and Verisign. Click here for a more complete list of supported certificates.
Follow the vendor's SSL certificate request process; in particular you may require the following details:
Once you have completed your certificate purchase, you're ready to install the certificate!
Installing the Certificate
NOTE: Some vendors will provide your certificate in text format in an email or on their website, which makes copy and pasting the certificate easy.
NOTE: Some vendors may provide your certificate as a .crt file. You can open this file in your favorite plain text editor--such as notepad--and retrieve the text for the certificate there.
NOTE: If you have any problems during the installation, please contact Support for assistance.
DNS for your site will be automatically updated if we are managing your DNS. It can take up to 2 hours for the new IP addresses for your site to complete propagation. If you are managing your own DNS, click on the Domain tab to get your new IP addresses.
What To Watch For
Currently The Rackspace Cloud does not support wildcard certificates--such as *.domain.com or *.example.com. These may or may not complete installation in the control panel and may or may not function as necessary. This feature is currently under consideration.
Removing an SSL certificate from a site will change the site's IP address the same way adding a new certificate will. DNS will need to be updated in that case as well.
SSL Tips and Tricks
© 2011-2013 Rackspace US, Inc.
Except where otherwise noted, content on this site is licensed under a Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported License