SSL Certificates
SSL/TLS Certificates
BlitzPress provides free, automatically managed SSL certificates via Let’s Encrypt.
Automatic Issuance
When you create a site and DNS is pointed to your server, BlitzPress automatically:
- Creates a webroot challenge file at
/.well-known/acme-challenge/ - Let’s Encrypt verifies domain ownership via HTTP
- Issues an ECC-256 certificate (faster TLS handshakes than RSA)
- Installs the certificate to OpenLiteSpeed
- Restarts OLS to apply
Certificate Details
| Property | Value |
|---|---|
| Provider | Let’s Encrypt |
| Key Type | ECC P-256 (ECDSA) |
| Validity | 90 days |
| Auto-Renewal | Yes (via acme.sh cron) |
| Covers | domain + www.domain |
Force HTTPS
Enable “Force HTTPS” in the panel to add a 301 redirect from HTTP to HTTPS. This is done at the OLS rewrite level (not PHP) for maximum performance.
Certificate Status
The panel shows your certificate status including:
- Issuer (Let’s Encrypt or self-signed)
- Expiry date
- Whether auto-renewal is active
Troubleshooting
SSL not issuing?
- Ensure DNS A record points to your server IP
- Port 80 must be open (Let’s Encrypt uses HTTP for verification)
- If using Cloudflare, temporarily set to DNS Only (gray cloud) during issuance
- Check acme.sh logs:
/root/.acme.sh/acme.sh --list