9 months ago

So you've received a critical risk finding for SSL not available, which means your domain does not have an SSL certificate installed on the server. SSL/TLS is the standard encryption method for internet use, and SSL/TLS certificates are granted by a certificate authority (CA), such as https://letsencrypt.org/'.

Once you have generated an SSL certificate from a trusted certificate authority, you will need to install it on your server.

To install the certificate on your server, ensure that the files are stored somewhere secure on your server that cannot be publicly accessed.

With these files on your server, you will next update the server config files manually to ensure that the web server communicates with your new SSL certificates.