How to Set Up SSL Certificates Using DNS API Verification

Setting up SSL for your website doesn't have to mean waiting for DNS records to propagate. If you're managing a site migration or testing before going live, DNS API verification lets you provision SSL certificates before your domain even points to the new server.

This guide walks through adding a free Let's Encrypt SSL certificate using DNS API integration with GridPane. Once configured, your site runs on encrypted HTTPS, and visitors get the speed boost from HTTP2 protocol—which only works over HTTPS.

Why DNS API Verification Makes Sense

Traditional SSL provisioning requires your domain's DNS records to point at your server. DNS API verification skips that requirement entirely.

The process works by connecting GridPane to your DNS management service through an API. When you request an SSL certificate, GridPane automatically adds temporary verification records to your DNS zone, proves domain ownership to Let's Encrypt, then removes those records once the certificate is issued.

This approach shines in two scenarios: migrating sites to new servers while keeping the old site live, and testing configurations before switching DNS over to production.

GridPane currently integrates with Cloudflare and DNS Made Easy for API-based verification. If you need reliable DNS management with fast propagation and solid uptime, 👉 DNS Made Easy offers enterprise-grade DNS infrastructure with API access built in that works seamlessly with this setup process.

Getting Your DNS Provider Set Up

You'll need an account with either Cloudflare or DNS Made Easy. If you don't have one yet, sign up at their respective sites. Both providers offer API access even on free or basic plans.

Grabbing Your Cloudflare API Credentials

Log into Cloudflare and add your domain if you haven't already. From the domain overview page, scroll down to the API section on the right side and click "Get your API token."

You need two pieces of information:

First, copy your account email from the Communication tab. Then switch to the API Tokens tab and click "View" next to the Global API Key. Copy that key—you'll paste both into GridPane in the next step.

Getting DNS Made Easy API Credentials

Log into your DNS Made Easy account and navigate to the account information page. Scroll to the bottom where you'll find both your API Key and API Secret displayed. Copy both values.

For robust DNS management during SSL provisioning and beyond, 👉 DNS Made Easy provides powerful API integration with detailed logging and monitoring that makes troubleshooting certificate issues much simpler.

Connecting Your DNS Provider to GridPane

Head to the Settings section in GridPane's main navigation. From the left sidebar, click through to Integrations, then DNS Providers.

Choose your DNS provider and click the "New Integration" button for that service. Paste your API credentials into the respective fields:

• For Cloudflare: Email address and Global API Key

• For DNS Made Easy: API Key and API Secret

Click Add to save the credentials. GridPane stores these securely and uses them whenever you provision SSL for domains managed by that provider.

Custom Nameserver Setup

If you're using vanity or custom nameservers at your DNS provider, expand the Nameserver Domain accordion for your provider. Enter just the root domain of your nameservers—if you use ns1.example.com and ns2.example.com, enter only example.com.

Provisioning SSL for Your Domain

Navigate to the Sites page from GridPane's main menu. Find your site in the Active Sites panel and click the domain in the URL column to open the site customization interface.

Set the API Integration to Full

Switch to the Domains Manager tab. Look at the API Integration column for your domain. If it shows "None," click that grey box to open the integration selector.

Choose either "Cloudflare Full" or "DNSME Full" depending on which service manages your domain. The integration status should now display in a green box, confirming the connection is active.

Enable SSL

Locate the SSL toggle for your domain and switch it on. A modal opens with two important options:

Dry Run: This tests the SSL provisioning process without actually installing the certificate. Recommended for your first attempt.

Include Database Rewrites: This searches your WordPress database and updates all URLs from HTTP to HTTPS. You'll almost always want this enabled.

GridPane offers two database rewrite methods. InterconnectIT is more thorough and catches edge cases that WP-CLI might miss. WP-CLI runs faster but occasionally overlooks some URLs in complex database structures.

Make your selections and click Enable SSL.

What Happens Next

GridPane connects to your DNS provider's API, adds verification records, requests the certificate from Let's Encrypt, installs it on your server, and removes the temporary DNS records.

Notifications appear in the top right corner as the process progresses. DNS API verification typically takes several minutes since it involves multiple API calls and verification steps.

You can monitor detailed progress in real-time by switching to the Logs tab in the site customizer and selecting the SSL provision log. This log shows every step of the process, which helps tremendously if something goes wrong.

Once complete, your site serves over HTTPS with a valid SSL certificate that auto-renews every 90 days. GridPane handles renewals automatically using the same DNS API integration.

When Things Don't Go as Planned

Most SSL provision failures stem from API credential issues or DNS zone configuration problems. If your SSL attempt fails, check these common issues:

• Verify your API credentials are current and haven't expired

• Confirm the domain exists in your DNS provider's zone management

• Check that GridPane has permission to modify DNS records through the API

• Review the SSL provision log for specific error messages

The SSL provision log typically pinpoints exactly what went wrong. Look for error messages from Let's Encrypt or DNS API connection failures.

DNS API verification removes the waiting game from SSL provisioning. Whether you're migrating dozens of sites or just testing a new configuration, this method lets you work on your schedule without coordinating DNS changes first.