# How to enable letsencrypt tomcat9

**URL:** <https://community.letsencrypt.org/t/how-to-enable-letsencrypt-tomcat9/180465>\
**Category:** Help\
**Created:** [June 30, 2022, 5:14pm UTC](https://community.letsencrypt.org/t/how-to-enable-letsencrypt-tomcat9/180465 "2022-06-30T17:14:03Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ederjdi](https://avatars.discourse-cdn.com/v4/letter/e/c57346/32.png) [@ederjdi](https://community.letsencrypt.org/u/ederjdi)\
**Post date:** [June 30, 2022, 5:14pm UTC](https://community.letsencrypt.org/t/how-to-enable-letsencrypt-tomcat9/180465/1 "2022-06-30T17:14:03Z")

</div>

Good afternoon dear colleagues, I have a doubt and I would like your help, I am using an unbuntu linux with tomcat9 I managed to generate the letsencrypt keys (chain.pem, fullchain.pem, privkey.key and cert.pem) and they are inside the /etc/letsencrypt folder

my question is how to activate it in tomcat9.

in the server.xml file I have the following configuration:

```nohighlight
<Connector port="443" protocol="org.apache.coyote.http11.Http11AprProtocol" maxThreads="150" SSLEnabled="true" >
        <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
        <SSLHostConfig>
            <Certificate certificateKeyFile="/etc/certs/privkey.key" certificateFile="/etc/certs/cert.pem" certificateChainFile="/etc/certs/chain.pem" type="RSA">
        </SSLHostConfig>
    </Connector>

```

the browser gives an error saying it has no certificate, all ports 80 and 443 are released and I tested with another certificate and it worked. Something I'm wrong in the configuration of tomcat9 with letsencrypt can anyone help me

Thank you very much

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [June 30, 2022, 5:22pm UTC](https://community.letsencrypt.org/t/how-to-enable-letsencrypt-tomcat9/180465/2 "2022-06-30T17:22:15Z")

</div>

> [@ederjdi](#):
>
> `/etc/certs/`

That is not the normal install path for LE certificates.  
Are the cert files there?

---

<div class="post-metadata">

**Author:** ![ederjdi](https://avatars.discourse-cdn.com/v4/letter/e/c57346/32.png) [@ederjdi](https://community.letsencrypt.org/u/ederjdi)\
**Post date:** [June 30, 2022, 5:51pm UTC](https://community.letsencrypt.org/t/how-to-enable-letsencrypt-tomcat9/180465/3 "2022-06-30T17:51:29Z")

</div>

I copied the files to this folder

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [June 30, 2022, 9:19pm UTC](https://community.letsencrypt.org/t/how-to-enable-letsencrypt-tomcat9/180465/4 "2022-06-30T21:19:14Z")

</div>

Here is an example of something that worked for me recently.  
[You will have to create a PFX file from the PEM files though]

```nohighlight
<Connector
                port="443"
                protocol="org.apache.coyote.http11.Http11NioProtocol"
                maxThreads="200"
                SSLEnabled="true"
                scheme="https"
                secure="true"
                keystoreType="PKCS12"
                keystoreFile="Path To PFX"
                keystorePass="Your Password"
                clientAuth="false"
                sslEnabledProtocols="TLSv1.2"
                ciphers="TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
                TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
                TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,
                TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,
                TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
                TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
                TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384,
                TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384"
/>

```

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [July 30, 2022, 9:20pm UTC](https://community.letsencrypt.org/t/how-to-enable-letsencrypt-tomcat9/180465/5 "2022-07-30T21:20:01Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.