1. Name Server Integration for Publishers with a Pre-existing SSL Certificate:
In this method, your SSL certificate is uploaded onto your site’s server. When the client initiates an HTTPS request, Ezoic uses the SSL certificate and decrypts the request. Ezoic then makes a call using HTTPS to your origin server to get the site contents, optimizes the page, and then returns the contents to the user.
- Ensure your site is integrated with Ezoic using Ezoic name servers.
- Verify that your site has a valid SSL certificate on the server.
- Enable the SSL App within Ezoic’s dashboard (Settings > Privacy > SSL tab > Edit SSL Settings).
![](https://support-osticket.s3.us-west-1.amazonaws.com/article_uploads/axG%2BvvRlL%2BPlu1ZYiD5zbwJZbj0%3D_5sf%2Br9Ki9LwtO7uRbSm0cg%3D%3D?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIARCESARAIVRJLVEJG%2F20240907%2Fus-west-1%2Fs3%2Faws4_request&X-Amz-Date=20240907T043421Z&X-Amz-Expires=900&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEPz%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJHMEUCIQCzl2Yx6R4Aw%2BAu6XghBKyG6DxZHm%2FwPInrVUoixxCCxgIgY4J%2FORRmXwHDK9L5V3h7ZyrwTQOWb%2FZpYbqjkwgWp74quwUIJRAAGgwwNzMzMjA2NjMwNTciDA9R4FyntcztoTx3zCqYBVwF7zuar%2Fo7hdJHkROL%2BhY%2Fqp%2B8xb5y1yJOjSg0IdEJW7F2BFnB%2FpbJa2NNX0mXM1zJlBfXDJnI61d0Ae2mrkunGmwdZm6%2BzQUve%2FlEzeC6vYGPT36qOU2Uc0QpHpGRBIdfShIxthbKWFLg4NZ75kSlW9Vq5sJbTkY5uclhEeY%2BcZb0OupYAn3hKOPYdu1oJIZyuWjnXjvR80ru%2BDzI371JdvQtZkEi2%2FsZVgy82Qmmsnh0BfCCxeKJQ2IlHYI%2FrwB20eh7wLPjzwQIJDuXwDYHOG4LjcggQA6mYu082tYqXIHGniDf8LRnpQD9UrIhTmiKSyN1nC4VmpRh12CZ%2BFxY%2F4AMpV2%2BBYlrPyzwaf8nc6R%2Fqg2Ntlux8KMfpsW6JK4I4wmZ%2FOTn6tpJ3ZbL9AviF0rAogvo%2BHK3V%2F%2BjA%2F6zsdniRLKw7SuVULJi47gj6BZx2KbBpfD1JToByzvh7GHajqiNIsbsJUAxnxQ8QSu4FKiu7Sq%2BPVt7l28Y11ac%2F%2F8jFQF8M3tkqJTmo0hP7CQMDbe7UUoYPjnCk0vuka3hBrEsbip0K8hvNKN%2FPUAtT36iLQuW39X%2Fuqcb4TBDbrPSbxO6RmGvVUFLRlReZetPGVc34vMIXbxOX9VRKbzgVXK3j8csOCtxaVweoQWA4F2zb0JjMJ2y%2Fd8gWImlaNsaIt%2BI%2FQH7iGeYJ%2BGfxSWSC24Gk1QG8z%2FRKnNxTI3e%2FMui2tg%2FyRRdsZeiv6lEUlvdLN6E%2FQP4VxrUs3IBNyoSUqhWI1b7cUBNL3ZRTbMPdl0wUoKE5DNpyCoVL0S0IoQykbhIGgZs1A3WZ3APLdcLpeCez%2Fw45Rqve5XMmctZ0leJWFVMwLQ5eymcKXOhZzprG2Sfjtt47iYwv5bvtgY6sQEYqcbsA6KDyufI7qFlhQ2yqtj8FdHb1WUXmQidAEA17oXdpYjyK4mUgozXt%2Bt4%2B%2FkUIe1iAEhywMfUuYTVFRus%2BrmKMFx%2FvnLFvB7ekSjcivE0McxiidiKNxoded5kr4thuxLpEIc5UdHnK7TxY%2Fb1LglrvGSG7jssz%2Bk6g3F9kHRieyhGdRBaXMGNtTOxriqL9%2FY%2BrkBHHQfrF1%2FSaEP0B4qeRb8CmbK4histfgY6G5E%3D&X-Amz-SignedHeaders=host&x-id=GetObject&X-Amz-Signature=6aa31c195b833c676c7a3a672c35b79309920cfa3027a6a36ed79b8184cfdb38)
- Select the 'Full' option in the SSL settings.
![](https://support-osticket.s3.us-west-1.amazonaws.com/article_uploads/yV%2BQTb3o4Xo3NPWgmO-1wLf41k0%3D_vkZvJ6hbSN026KjLUT7JfQ%3D%3D?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIARCESARAIVRJLVEJG%2F20240907%2Fus-west-1%2Fs3%2Faws4_request&X-Amz-Date=20240907T043421Z&X-Amz-Expires=900&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEPz%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJHMEUCIQCzl2Yx6R4Aw%2BAu6XghBKyG6DxZHm%2FwPInrVUoixxCCxgIgY4J%2FORRmXwHDK9L5V3h7ZyrwTQOWb%2FZpYbqjkwgWp74quwUIJRAAGgwwNzMzMjA2NjMwNTciDA9R4FyntcztoTx3zCqYBVwF7zuar%2Fo7hdJHkROL%2BhY%2Fqp%2B8xb5y1yJOjSg0IdEJW7F2BFnB%2FpbJa2NNX0mXM1zJlBfXDJnI61d0Ae2mrkunGmwdZm6%2BzQUve%2FlEzeC6vYGPT36qOU2Uc0QpHpGRBIdfShIxthbKWFLg4NZ75kSlW9Vq5sJbTkY5uclhEeY%2BcZb0OupYAn3hKOPYdu1oJIZyuWjnXjvR80ru%2BDzI371JdvQtZkEi2%2FsZVgy82Qmmsnh0BfCCxeKJQ2IlHYI%2FrwB20eh7wLPjzwQIJDuXwDYHOG4LjcggQA6mYu082tYqXIHGniDf8LRnpQD9UrIhTmiKSyN1nC4VmpRh12CZ%2BFxY%2F4AMpV2%2BBYlrPyzwaf8nc6R%2Fqg2Ntlux8KMfpsW6JK4I4wmZ%2FOTn6tpJ3ZbL9AviF0rAogvo%2BHK3V%2F%2BjA%2F6zsdniRLKw7SuVULJi47gj6BZx2KbBpfD1JToByzvh7GHajqiNIsbsJUAxnxQ8QSu4FKiu7Sq%2BPVt7l28Y11ac%2F%2F8jFQF8M3tkqJTmo0hP7CQMDbe7UUoYPjnCk0vuka3hBrEsbip0K8hvNKN%2FPUAtT36iLQuW39X%2Fuqcb4TBDbrPSbxO6RmGvVUFLRlReZetPGVc34vMIXbxOX9VRKbzgVXK3j8csOCtxaVweoQWA4F2zb0JjMJ2y%2Fd8gWImlaNsaIt%2BI%2FQH7iGeYJ%2BGfxSWSC24Gk1QG8z%2FRKnNxTI3e%2FMui2tg%2FyRRdsZeiv6lEUlvdLN6E%2FQP4VxrUs3IBNyoSUqhWI1b7cUBNL3ZRTbMPdl0wUoKE5DNpyCoVL0S0IoQykbhIGgZs1A3WZ3APLdcLpeCez%2Fw45Rqve5XMmctZ0leJWFVMwLQ5eymcKXOhZzprG2Sfjtt47iYwv5bvtgY6sQEYqcbsA6KDyufI7qFlhQ2yqtj8FdHb1WUXmQidAEA17oXdpYjyK4mUgozXt%2Bt4%2B%2FkUIe1iAEhywMfUuYTVFRus%2BrmKMFx%2FvnLFvB7ekSjcivE0McxiidiKNxoded5kr4thuxLpEIc5UdHnK7TxY%2Fb1LglrvGSG7jssz%2Bk6g3F9kHRieyhGdRBaXMGNtTOxriqL9%2FY%2BrkBHHQfrF1%2FSaEP0B4qeRb8CmbK4histfgY6G5E%3D&X-Amz-SignedHeaders=host&x-id=GetObject&X-Amz-Signature=42e1598bbb44a9abb00a4f2fddd08dc20878073f902eefca5cd9f428966e6874)
- If there is no automatic redirect to HTTPS at the host server, enable this setting in the Ezoic dashboard. Be cautious to avoid enabling it if there's already an automatic redirect at the host server to prevent site issues.
2. Name Server Integration for Publishers without a Pre-existing SSL Certificate:
With this method, the client initiates an HTTPS request, Ezoic has the SSL certificate and is able to decrypt the request. Ezoic then makes a call using HTTP, unencrypted, to your site’s origin server to get the contents. Following this, Ezoic will optimize the page, encrypt the contents, and return this information to the user.
- Ensure your site is integrated with Ezoic using Ezoic name servers.
- Verify that your site does not have a pre-existing SSL certificate on the server.
- Add your hosts (including any subdomains) in the SSL app to generate Ezoic Certificates.
- Choose the 'Flexible' option in the SSL settings.
- Verify that HTTPS is functioning on the site by changing the URL from HTTP to HTTPS. Once verified, you can select to automatically redirect all HTTP requests to HTTPS.
![](https://support-osticket.s3.us-west-1.amazonaws.com/article_uploads/EqlJVi5fcTF5xYgdzIC6WfpFLYY%3D_OQKIJOOYjXe%2BqOGOeiC0PA%3D%3D?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIARCESARAIVRJLVEJG%2F20240907%2Fus-west-1%2Fs3%2Faws4_request&X-Amz-Date=20240907T043421Z&X-Amz-Expires=900&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEPz%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJHMEUCIQCzl2Yx6R4Aw%2BAu6XghBKyG6DxZHm%2FwPInrVUoixxCCxgIgY4J%2FORRmXwHDK9L5V3h7ZyrwTQOWb%2FZpYbqjkwgWp74quwUIJRAAGgwwNzMzMjA2NjMwNTciDA9R4FyntcztoTx3zCqYBVwF7zuar%2Fo7hdJHkROL%2BhY%2Fqp%2B8xb5y1yJOjSg0IdEJW7F2BFnB%2FpbJa2NNX0mXM1zJlBfXDJnI61d0Ae2mrkunGmwdZm6%2BzQUve%2FlEzeC6vYGPT36qOU2Uc0QpHpGRBIdfShIxthbKWFLg4NZ75kSlW9Vq5sJbTkY5uclhEeY%2BcZb0OupYAn3hKOPYdu1oJIZyuWjnXjvR80ru%2BDzI371JdvQtZkEi2%2FsZVgy82Qmmsnh0BfCCxeKJQ2IlHYI%2FrwB20eh7wLPjzwQIJDuXwDYHOG4LjcggQA6mYu082tYqXIHGniDf8LRnpQD9UrIhTmiKSyN1nC4VmpRh12CZ%2BFxY%2F4AMpV2%2BBYlrPyzwaf8nc6R%2Fqg2Ntlux8KMfpsW6JK4I4wmZ%2FOTn6tpJ3ZbL9AviF0rAogvo%2BHK3V%2F%2BjA%2F6zsdniRLKw7SuVULJi47gj6BZx2KbBpfD1JToByzvh7GHajqiNIsbsJUAxnxQ8QSu4FKiu7Sq%2BPVt7l28Y11ac%2F%2F8jFQF8M3tkqJTmo0hP7CQMDbe7UUoYPjnCk0vuka3hBrEsbip0K8hvNKN%2FPUAtT36iLQuW39X%2Fuqcb4TBDbrPSbxO6RmGvVUFLRlReZetPGVc34vMIXbxOX9VRKbzgVXK3j8csOCtxaVweoQWA4F2zb0JjMJ2y%2Fd8gWImlaNsaIt%2BI%2FQH7iGeYJ%2BGfxSWSC24Gk1QG8z%2FRKnNxTI3e%2FMui2tg%2FyRRdsZeiv6lEUlvdLN6E%2FQP4VxrUs3IBNyoSUqhWI1b7cUBNL3ZRTbMPdl0wUoKE5DNpyCoVL0S0IoQykbhIGgZs1A3WZ3APLdcLpeCez%2Fw45Rqve5XMmctZ0leJWFVMwLQ5eymcKXOhZzprG2Sfjtt47iYwv5bvtgY6sQEYqcbsA6KDyufI7qFlhQ2yqtj8FdHb1WUXmQidAEA17oXdpYjyK4mUgozXt%2Bt4%2B%2FkUIe1iAEhywMfUuYTVFRus%2BrmKMFx%2FvnLFvB7ekSjcivE0McxiidiKNxoded5kr4thuxLpEIc5UdHnK7TxY%2Fb1LglrvGSG7jssz%2Bk6g3F9kHRieyhGdRBaXMGNtTOxriqL9%2FY%2BrkBHHQfrF1%2FSaEP0B4qeRb8CmbK4histfgY6G5E%3D&X-Amz-SignedHeaders=host&x-id=GetObject&X-Amz-Signature=577ea40d4fa528ccf1a89f14b9986df714213c3a2a59e261994c8b739fbd4cd0)
3. Cloudflare Integration:
To integrate via Ezoic's CloudFlare app, if you have an SSL provided by CloudFlare you need to make sure the SSL app at Ezoic reflects these settings at Cloudflare, for example, "Strict", "Full", or "Flexible".
- Integrate your site with Ezoic via the Cloudflare app using Cloudflare name servers.
- Full:
- Ensure your site is using Cloudflare 'Full' or 'Strict' SSL.
- Upload your SSL Certificate/Key to Ezoic or install the SSL app in Ezoic’s dashboard.
- Flexible:
- Ensure your site is using Cloudflare 'Flexible' SSL.
- No action is required in the Ezoic dashboard.
- Strict:
A publisher with a pre-existing SSL certificate and using CloudFlare may see that their settings are set to strict. This works in the same way that the full setting would, except it means that the origin SSL certificate MUST be valid. The client initiates an HTTPS request; the request goes to Cloudflare first; Cloudflare then decrypts the request and then forwards it to Ezoic as an HTTPS request. Ezoic also has the SSL certificate and decrypts the request. Ezoic then makes a call using HTTPS to the site’s origin server to get the content, optimizes the page, and then returns the content to Cloudflare, which returns this information to the user.
- Ensure your Cloudflare settings are set to strict.
- Verify that your origin SSL certificate is valid (unexpired, issued by a trusted certificate authority, and contains a common name or subject alt name that matches the requested host name).
Please note that Ezoic SSL is incompatible with the WordPress Plugin integration method.