WHAT WE TESTED
EasySSLSetup has been built and tested in stages. The controlled production path has passed real issuance, installation, and independent live HTTPS verification. Public automatic certificate activation remains intentionally disabled.
Controlled testing proved production certificate issuance, HTTP-01 validation and cleanup, key, SAN, chain and trust verification, controlled cPanel installation, independent live HTTPS verification, rollback recovery, token cleanup, and protected-site isolation.
Testing proved one-time signed enrollment, real network ownership-marker verification, replay protection, and dedicated cleanup without exposing SSL private keys.
The customer-facing setup flow passed controlled onboarding, preflight, ownership verification, cleanup, and real read-only SSL status reporting.
The activation foundation now includes fail-closed transaction handling, crash/restart recovery, strict candidate validation, independent live verification, and automatic rollback design. Public automatic certificate installation remains disabled while multi-customer and public-release safeguards are completed.
CURRENT SAFETY STATUS
SECURITY BOUNDARIES
SSL private keys stay customer-side. The central service is not designed to hold the private key that protects a customer website.
Hosting credentials stay local to the customer host. The design uses local protected credential handling and does not permit the central EasySSLSetup service to receive cPanel credentials.
Public status can be checked without changing a certificate. Read-only monitoring is kept separate from the future one-click activation process.
Public automatic activation is still gated. Controlled production validation passed, but public automatic certificate installation remains intentionally disabled while release safeguards are completed.
EasySSLSetup