Use SSL on Weebly Cloud Sites
Your customer's sites can use SSL. Restrictions and set up are different, depending on how you host your sites.
Note: If a site has a store, then the checkout process is always secure and hosted at Weebly, even if SSL is not turned on.
In this topic:
Site owners can turn SSL on and off for a site in the General settings section of the editor. For Weebly-hosted sites, this option is available for sites on the Starter plan or above. If you host your sites, you have control over which plans allow it and you'll need to use the API to make this option visible to your customers.
Click the image for a larger view.
Hosting and SSL
How SSL works differs depending on how your sites are hosted.
Self-hosted:
Weebly-hosted:
More on the different hosting options here.
Self-hosted:
- When SSL is enabled, the .htaccess file is updated to force all traffic to use HTTPS. You must issue a valid SSL certificate from a third party - Weebly doesn't provide one.
If you don't supply the certificate, site visitors receive a broken SSL certificate notice and can't access the site. - You determine which sites have the option of enabling SSL using the API.
- If the site contains a store, the checkout flow always uses HTTPS, regardless of how SSL is configured for the site. However, this will not be on the site's domain. It will always be on checkout.weebly.com. All other pages will use the site's domain.
Weebly-hosted:
- Weebly provides the SSL certificate.
- Any sites on the Starter plan or above have the ability to enable SSL.
- If the site contains a store, the checkout flow always uses HTTPs, regardless of how SSL is configured for the site. If the SSL option is not selected for the site, the URL for the checkout flow is checkout.weebly.com. If the option is selected, the site's own domain is used.
More on the different hosting options here.
Enabling the SSL Option for Self-Hosted Sites
For self-hosted sites the SSL option does not display on the General settings page. You need to make a call to the Site API and update a site's record to enable the SSL option. You use the PATCH endpoint and set allow_ssl to true.
Here's an example:
Here's an example:
Enable the SSL Option in the Editor
Once you make the call, the option appears on the Settings page.
More info on using the Site API here.
More info on using the Site API here.