Add an auto-generated SSL certificate

By default, CloudCannon will automatically generate an SSL certificate for all Sites hosted on CloudCannon through ZeroSSL and Cloudflare. This can be a wildcard SSL certificate or a single-domain SSL certificate. These certificates renew every 90 days automatically, so your Site is never insecure.

• Wildcard SSL certificate — A certificate that protects a single domain and all its subdomains (e.g., example.com and its subdomains blog.example.com, support.example.com, app.example.com, etc.).
• Single-domain SSL certificate — A certificate that protects a single domain. This is useful if you only have one CloudCannon Site, which is hosted on a subdomain.

After adding an auto-generated SSL certificate, CloudCannon serves your Site over HTTPS. You can also redirect any users trying to access your website through the HTTP URL to the correct HTTPS URL.

Before you add an SSL certificate to your Site, you must add a Custom Domain to your Organization.

To add an auto-generated SSL certificate to your Site:

1. Navigate to the Domains Browser by clicking Domains in the App Sidebar.
2. Select the domain to which you want to add a certificate.
3. Under the Subdomains heading, click the card for the subdomain to which you want to add the certificate.
4. Click the Configure button under the SSL heading. CloudCannon will open the Configure SSL modal.
5. Select a version number from the Minimum TLS Version dropdown.
6. Select the DNS Text Record option from the Validation Method dropdown.
7. (Optional) If you are adding an SSL certificate to a Site hosted on your base domain, ensure the Generate a wildcard certificate to enable SSL on *example.com checkbox is ticked. This option is not available for Sites hosted on a subdomain.
8. Click the Update SSL button.

CloudCannon will add an auto-generated SSL certificate to your domain.

To switch between a wildcard SSL certificate and a single domain SSL, untick the Generate a wildcard certificate to enable SSL on *example.com checkbox and click the Update SSL button.

Add TXT DNS records#

TXT record validation is a method of authenticating ownership of your domain, so unauthorized individuals cannot add an SSL certificate to your domain.

DNS TXT Records demonstrate control over a domain, as only authorized individuals should be able to update the records stored by your DNS provider. If you are using CloudCannon DNS, you do not need to add a TXT record, as CloudCannon will handle validation for you. If you are using an external DNS provider, you will need to add the two TXT records provided by CloudCannon to your DNS provider.

To use TXT record validation through an external DNS provider:

1. Navigate to the Domains Browser by clicking Domains in the App Sidebar.
2. Select the domain for which you want to add TXT records.
3. Under the Subdomains heading, click the card for the subdomain to which the SSL certificate applies.
4. Copy the two TXT records provided by CloudCannon.
5. Log in to your third-party DNS provider.
6. Add two TXT records to your DNS provider.

CloudCannon will validate your SSL certificate once the new DNS records propagate from your DNS provider. This could take up to 24 hours.

Redirect HTTP to HTTPS#

Once your SSL certificate is enabled, users can visit your Site on the more secure HTTPS URL. CloudCannon will redirect any users who request the HTTP URL. For more information on redirects, please read our documentation on configuring HTTP redirects.