====== ssl.cert ======
The Synchronet ''[[dir:ctrl]]/ssl.cert'' file is required for SSL/TLS (encrypted/secure TCP communications).

The ''ssl.cert'' and ''[[cryptlib.key]]'' files are encrypted with the Synchronet //system password//, so if the system password is changed (e.g. in [[util:SCFG]]->System->Security Options) then these files must also be regenerated.

  * Synchronet can automatically create a self-signed ''ssl.cert'' file upon startup or (in v3.20 and later) upon first TLS session, if it does not already exist. In Synchronet v3.21 and later, [[util:SCFG]]->System->Security Options->Create Self-signed Certificate option must be set to "Yes" .
  * To create a CA-signed TLS certificate (signed by //Let's Encrypt//), see [[module:letsyncrypt]].
  * To import a certificate created by other means (e.g. OpenSSL), see [[module:certtool]].

===== See Also =====
  * [[:config:|config index]]

{{tag>TLS SSL certificate security}}
