I made this shell script to automate the import of the newly renewed/created certificates into the Java Keytool and Glassfish. Any pointers or ideas for improvements. Specifically if anyone know how to query for the password rather than hardcoding it. Modify the four variables as needed. #!/bin/s…

After configure the commands below, GF arises this error in server.log: [#|2016-04-15T14:25:15.676-0400|WARNING|glassfish3.1.2|com.sun.grizzly.config.GrizzlyServiceListener|_ThreadID=102;_ThreadName=Thread-2;|GRIZZLY0007: SSL support could not be configured! java.io.IOException: injection failed on…

Seems that this algorithm solves the problem: https://maximilian-boehm.com/hp2121/Create-a-Java-Keystore-JKS-from-Let-s-Encrypt-Certificates.htm do not forget to merge two jks-files (default keystore.jks with s1as alias and new one created from the link above)

[image] Sergey: Seems that this algorithm solves the problem: https://maximilian-boehm.com/hp2121/Create-a-Java-Keystore-JKS-from-Let-s-Encrypt-Certificates.htm do not forget to merge two jks-files (default keystore.jks with s1as alias and new one created from the link above) I followed the…

Hi @Sergey and @musterio , I did this script to install cert LetsEncrypt into GF/Payara: DOMAIN=mydomain.com KEYSTOREPW=mypass KEYSTOREPWGF=changeit GF_HOME=/sistemas/payara41 GFDOMAIN=$GF_HOME/glassfish/domains/domain1/ wget -O - https://get.acme.sh | sh source /root/.bashrc acme.sh --issu…

how i would probably go about this in production A) Create a hash of the password (in openssl outside of the script) B) ask user for password read -s -p "Password: " mypassword C) hash and compare password if hashes match let user go and use the script Not a big fan of storing passwords in plain…

hello and thanks for the reply, well i am using glassfish without payara, I tried your shell script but it didn't work correctly. I am new to glassfish and ssl, so i am having a hard time figuring things out. When i ran the script of @Grandt it worked correctly with the needed ssl website and the ce…

Hello again, i solved the login issue. The main reason for invalid console login was that the keystore.jks being update while the cacerts.jks remained the same. So i took the old bash, then made the same keytool imports to a new file called cacerts.jks and replaced it with the current ones in glassf…

@musterio That actually solve the problem about login on admin/console, but now i can’t login to google auth api, it give the error: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException:…

Thanks you guys, you saved a lot of my time :+1:!

Those scripts are actually quite bloated. I tried to do a minimalistic version of a LetsEncrypt/GlassFish import. Basically you only need to do two things: Import the certificate private key into a .jks keystore with aliases both for glassfish-instance as well as s1as. Add the certificate to the t…

Importing LetsEncrypt into Java and Glassfish

Server

ZoXaL November 30, 2016, 9:40pm 11

Thanks you guys, you saved a lot of my time !

Topic		Replies	Views
How to get certificates into Java keystore? Help	17	18401	January 19, 2017
Using LetsEncrypt Certificates on Tomcat 8.x on Windows Help	12	23962	March 13, 2017
Unable to login (Glassfish admin) after enbling let's encrypt Cert Server	1	918	April 25, 2018
How to use the certificate for Tomcat Server	46	90401	November 11, 2017
Certificate upgrade Java Tomcat (and Apache) Server	15	3015	March 19, 2019

Importing LetsEncrypt into Java and Glassfish

Related topics