How to Configure SSL on OpenLiteSpeed with Let's Encrypt

OpenLiteSpeed includes built-in Let's Encrypt integration making SSL configuration straightforward. This guide covers both the WebAdmin method and command-line approach.

Method 1 — Via WebAdmin (easiest)

http://your-server:7080
→ WebAdmin Console
→ Virtual Hosts → your domain
→ SSL → Private Key & Certificate
→ Use Let's Encrypt

Method 2 — Certbot + Manual Configuration

# Install Certbot
sudo apt install certbot -y

# Get certificate (webroot method)
sudo certbot certonly --webroot   -w /var/www/html   -d yourdomain.com   -d www.yourdomain.com   --email [email protected]   --agree-tos

Configure SSL in WebAdmin

WebAdmin → Listeners → Add SSL Listener:
Port: 443
Secure: Yes

SSL Private Key: /etc/letsencrypt/live/yourdomain.com/privkey.pem
SSL Certificate: /etc/letsencrypt/live/yourdomain.com/fullchain.pem

Configure HTTPS Redirect

# Add to .htaccess
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Enable HTTP/2 and HTTP/3

WebAdmin → Listeners → SSL Listener:
✅ HTTP/2: Enabled
✅ QUIC/HTTP3: Enabled

Auto-Renewal Setup

sudo crontab -e

0 3 * * * certbot renew --quiet --post-hook "sudo /usr/local/lsws/bin/lswsctrl restart"

Test SSL Configuration

curl -I https://yourdomain.com
# Check: https://www.ssllabs.com/ssltest/

Conclusion

OpenLiteSpeed with SSL and HTTP/3 delivers the fastest HTTPS performance available. Our team configures complete SSL and web server setups.