Setting Up (and renewing) SSL
The examples here are for setting up SSL against both the Jetty server running in development mode and another certificate for Apache front end on a Tomcat server running production. See SSL Requirements for more detail regarding the needs that are addressed.
References
- For setting up Jetty (version jetty-9.2.5.v20141112): http://www.eclipse.org/jetty/documentation/current/configuring-ssl.html
- Finding a Certificate Authority
Servers being setup for SSL
- Apache SSL Configuration (production)
- Tomcat SSL Configuration (test)
- Jetty SSL Configuration (dev)
Renewals
For further details: Renewing a Certificate heading of this page (opens in a new tab)
The Let's Encrypt certs are good for 90 days. To renew, follow these steps:
- git "repo" on sagitta
- letsencrypt-auto script
To setup a new site, run the letsencrypt-auto script without any parameters. It's possible it can pick up the list of sites/domains from the configuration files.
page revision: 10, last edited: 06 Apr 2017 00:49