letsencrypt tomcat keystore

letsencrypt tomcat keystore
Create the Keystore
keytool -genkey -alias tomcat -keyalg RSA -keystore /home/ec2-user/.keystore -keysize 2048
Gneerate the CSR
Request for certificate
PEM file will be generated
add the pem file to the keystore
Tomcat server chnages
add keystore location and password in the SSL connector
NAT Changes
Restart the server
Verify the chnages

Iptables changes
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
iptables -t nat -I OUTPUT -p tcp -d 127.0.0.1 --dport 80 -j REDIRECT --to-ports 8080

iptables -t nat --line-numbers -n -L

iptables -t nat -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-port 8443
iptables -t nat -I OUTPUT -p tcp -d 127.0.0.1 --dport 443 -j REDIRECT --to-ports 8443
iptables -t nat --line-numbers -n -L

letsencrypt tomcat ubuntu
letsencrypt tomcat 8 ubuntu
certbot tomcat
let's encrypt jks
certbot tomcat 8
letsencrypt java keystore
letsencrypt webroot tomcat
tomcat letsencrypt ssl

[pedrohfialho]

Thanks! Worked 100%
Should add to description iptable commands though.
Also, in my case it was necessary to sudo apt-get install virtualenv for running the script and sudo service tomcat7 stop before executing the ssl verification.

[djaxtech]

"sudo ./certbot-auto certonly --csr request.csr --no-bootstrap"i got error how to fix,
"An unexpected error occurred:
The request message was malformed :: Error creating new order :: Name does not end in a public suffix"

[carlosmollapaza]

Hello it is work, how to autorenew certificate with cerbot

[fayazkhan-zqpq]

./certbot-auto certonly --csr request.csr --no-bootstrap how it will run and download in my server ..can you please tell me

[carlosmollapaza]

this configuration working for multiple ssl? with one only ip?

[carlosmollapaza]

sudo ./certbot-auto certonly --csr request.csr --no-bootstrap, error COMMAND NOT FOUND