Interworx 7 is a little different in finding Let's Encrypt, but the process is pretty much identical to older Interworx.
Login to Siteworx for the Domain you want to Manage. Make sure you are in Siteworx and not Nodeworx.
- Under Domains > Click "Manage"
- Next Click the Lock/Shield Icon next to the Domain
- Next, click the button: Generate all with Let's Encrypt
Inside that page, you will click the primary domain and any subdomain. Note that whatever you click will have to already be pointing to the server via DNS. If it's only 1 subdomain for SSL, and nothing else, you'll pick the same domain for common name and for the subject alternative names.
After it's generated, you will notice there is no CSR. No CSR is needed for Let's Encrypt since the domain is validated using an http request.
If it comes back with an error, you can go to the Siteworx Logs and see the Let's Encrypt log for why it did not validate. Typically it is because you don't have DNS pointed to the domain yet, or you have an htaccess rule that is over-riding the ability for the Let's Encrypt verify bot to check the .well-known folder. If you are getting this problem, add this to the top of the .htaccess in the site html folder. (note: if you don't have an .htaccess file, create one.)
RewriteEngine On
RewriteRule ^\.well-known/.+ - [END]After the certificate is generated, I like to add this rule to .htaccess that redirects all requests to their secure counter part. This helps with your Google listing too.
RewriteCond %{HTTPS} !=on
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301,NE]
Header always set Content-Security-Policy "upgrade-insecure-requests;"If you have questions or want us to do this for you, just open a support ticket and we'll take care of it.
Let's Encrypt Certificates automatically renew every 90 days.
