WebAdmin Console¶
Install/Change SSL Certificates¶
With Files¶
For all modern version of LiteSpeed Web Server (v5.2+), LSWS reads the following files for its WebAdmin SSL configuration:
- Certificate File:
/usr/local/lsws/admin/conf/cert/admin.crt
- Key File:
/usr/local/lsws/admin/conf/cert/admin.key
- CABundle:
/usr/local/lsws/admin/conf/cert/admin.cabundle
This configuration can be changed at any time by replacing these files directly.
Make sure the files are owned by lsadm:lsadm
. This can be achieved by running the following command:
chown -R lsadm:lsadm /usr/local/lsws/admin/conf/cert/*
Perform a graceful restart after making any changes. The changes will be applied, and the WebAdmin Console will begin using the newly-supplied certificate.
Within WebAdmin Console¶
You can update SSL certificates from the WebAdmin Console for any version of LiteSpeed Web Server.
- Log in to the WebAdmin Console and navigate to Web Console > Listeners.
- Click View/Edit for the
adminListener
- In the General tab, click Edit and change Secure from
No
toYes
. Then hit Save.
- Click on the SSL tab, hit Edit under the SSL Private Key & Certificate section, and add the following:
- Private Key File: Path to the private key file, for example,
/usr/local/lsws/admin/conf/ssl.key
- Certificate File: Path to the certificate file, for example, `/usr/local/lsws/admin/conf/ssl.cert
- Chained Certificate:
Yes
- CA Certificate File: Path to the CA certificate file, for example,
/usr/local/lsws/admin/conf/ssl.bundle
!!! note Make sure that these files can be read bylsadm
. If not, runchown lsadm:lsadm
on each file so that the WebAdmin Console can read these files.
- Private Key File: Path to the private key file, for example,
- Save and perform a Graceful Restart of the web server. The Web Admin GUI should now be using the non-self-signed certificate.