Starting next week, our in-house developed ACME client will go live and you’ll be able to issue and install a free Let’s Encrypt SSL certificate for the majority of your WebFaction hosted websites.
We will enable this feature in two waves. On Monday, the 17th of September, 2018 for all websites on cloud servers and, baring any major issues, for websites on shared servers a week later, on Monday, the 24th of September, 2018.
In order for our Let’s Encrypt certificate tool to work, the website you want to generate the certificate for should be resolving to the IP address of our server, either by having it’s NS records pointing to our nameservers or have it’s A records pointing to the web server’s IP address.
We’ve already updated our control panel documentation to include instructions on how to secure your websites, but if you have any questions feel free to raise a ticket and our support team will gladly answer any questions you might have.
Please note that there are currently three limitations on our custom ACME client:
- there is no support for wildcard domains
- it is not possible to enable or disable a Let’s Encrypt certificate using our API
- no certificates for webfactional.com subdomains. If you have one in your https websites, you will need to remove it before issuing a certificate
All are in our road-map to work out in a future version.
Also note that Let’s Encrypt has set some rate limits, which you can review here. Our control panel will show an error if you try to hit them.