SSL Configuration

SSL certificates have been implemented on the staging and production environments for the user interface. Encryption of API requests have now been implemented on staging and production environments. They have a separate subdomain as api.staging.openconceptlab.org and api.openconceptlab.org respectively.

These are free certificates which are valid only for 3 months. In order to renew the certificate once expired, we have added a crontab entry in both staging and production, which checks for certificate validity daily at 5:00 AM and renews the certificate if required.

These SSL certificates (https) are attached to ocl_web only.

The free certificates are registered in the "letsencrypt" community: https://certbot.eff.org/#ubuntuxenial-nginx