How do I install wild card Cerbot SSL certificate
Hi everyone,
I've got a question, maybe someone can help me.
I am trying to install a wild card cerbot ssl certificate on me server, but allmost in the finish of the proccess I got the next message:
"File not found /root/.secrets/cerbot/linode.ini"
after that, the process was cancelled. Can someone tell me what I am doing wrons (I am working with ubuntu 20.04 and apache-tomcat 8.5.58)
I will gratefull with your help,
Regards,
hmartinez
2 Replies
Hi @hmartinez I would install Certbot first if you haven’t already and follow the instructions on here. https://certbot.eff.org
You should be able to make certificates for all the domains on your server.
Let us know if that helps.
Thanks @LouWestin for you reply.
I let you know I followed carefully the the indications on https://certbot.eff.org and at the end I was able to install succesfully the Certbot certificate. The problem is that although the certificate was installed succesfully this is not working (on the browser address line I can't access by https://.. just by the http://).
When the certificate was installed, I got the next message:
IMPORTANT NOTES:
Congratulations! Your certificate and chain have been saved at:
/etc/letsencrypt/live/mantprev.com/fullchain.pem
Your key file has been saved at:
/etc/letsencrypt/live/mantprev.com/privkey.pem
Your cert will expire on ……..
After that I install my new certificate in the server.xml file of the apache-tomcat this way:
<connector maxthreads="150" port="8443" protocol="org.apache.coyote.http11.Http11AprProtocol" sslenabled="true">
<upgradeprotocol classname="org.apache.coyote.http2.Http2Protocol">
<sslhostconfig>
<certificate certificatechainfile="/etc/letsencrypt/live/mantprev.com/fullchain.pem" certificatefile="/etc/letsencrypt/live/mantprev.com/fullchain.pem" certificatekeyfile="/etc/letsencrypt/live/mantprev.com/privkey.pem" type="RSA">
</certificate></sslhostconfig>
</upgradeprotocol></connector>
It seems extrange to me that the catalina log says this:
OpenSSL successfully initialized [OpenSSL 1.1.1f 31 Mar 2020]. I would expect that the catatina log would say something about Certbot instead of OpenSSL.
If you can help me, I will be gratefull.
Regards,
hmartinez