Regarding renewing the SSL certs automatically in author and publish instances. | Community
Skip to main content
Nagesh_Mohan
Nagesh_Mohan
Level 2
Oct 9, 2019 9:29 AM UTC
Solved

Regarding renewing the SSL certs automatically in author and publish instances.

Hi All,

We have enabled https 8443 port on both Author and Publish instances but while creating certificates we have mentioned 365 days now it got expired so we need to renew it. I need to automate the process by using Let's encrypt or Certbot but I am not sure how to implement it using those tools.

Please share the steps with any if any available.

Thanks,

Nagesh

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
joerghoh
joerghohAccepted solution
Employee
Oct 10, 2019 2:54 PM UTC

If you can live with the fact, that the connection between dispatcher and AEM is unencrypted, you can just use the standard tools to keep the webserver certificate uptodate (the one which is end-user facing).

View reply

7 replies

joerghoh
joerghohAccepted solution
Employee
Oct 10, 2019 2:54 PM UTC

If you can live with the fact, that the connection between dispatcher and AEM is unencrypted, you can just use the standard tools to keep the webserver certificate uptodate (the one which is end-user facing).

Translate
Nagesh_Mohan
Nagesh_MohanAuthor
Level 2
Oct 10, 2019 11:26 AM UTC

Thanks for the information.  I have a query that everytime will it create new certs or renews the certs.

Translate
leoberliant
Employee
Oct 9, 2019 5:58 PM UTC

OOTB AEM does not have an SSL "automate the renewal process". I think that if you manage to automate SSL auto-renewal with Let's Encrypt Project", then with a curl script suggested by Jaideep you can achieve the last step of upload new cert to AEM.

Translate
mitp18720189
mitp18720189
New Participant
Oct 9, 2019 3:43 PM UTC

You can setup a cron job to automatically renew SSL certificates.

More details here : https://www.onepagezen.com/letsencrypt-auto-renew-certbot-apache/

Translate
Nagesh_Mohan
Nagesh_MohanAuthor
Level 2
Oct 9, 2019 1:42 PM UTC

Hi, I have an idea on how to create certs and uploading the certs to instance but i need to automate the renewal process instead of recreating and uploading, etc. Please refer Let's Encrypt Project.

Thanks,

Nagesh

Translate
Hamid1350
Employee
Oct 9, 2019 1:30 PM UTC

Are you assuming a new certificate is already generated to upload ?

Translate
user05162
Employee
Oct 9, 2019 12:27 PM UTC

Not sure about the certificate creation but for upload to AEM, you can use a CURL command similar to below. More details at [1]

curl -u user:password -F "keystorePassword=password" -F "keystorePasswordConfirm=password" -F "truststorePassword=password" -F "truststorePasswordConfirm=password" -F "privatekeyFile=@localhostprivate.der" -F "certificateFile=@localhost.crt" -F "httpsPort=8443" http://host:port/libs/granite/security/post/sslSetup.html

[1] SSL By Default

Translate
Terms & ConditionsAccessibility statement

Loading footer...