This script is to help you automate the process of renewing Letsencrypt ssl certficate on Tomcat server. For more details on prerequistes for this script, visit the page > Bash Script to Auto-renew Letsencrypt SSL certificate on Tomcat. It has all the details you need for both Debian based distributions and CentOS.
First clone the repository:
$ git clone https://github.com/saku-xyz/letsencrypt-tomcat-server.git
$ cd letsencrypt-tomcat-server
Once you have cloned the repo or downloaded the script. There are few variables that you need to define before you're ready to execute the script. These file to edit is tomcat-letsencrypt-autorenew.sh
TOMCAT_DOMAIN=""
TOMCAT_KEY_PASS=""
CERTBBOT_BIN="/usr/local/bin/certbot-auto"
EMAIL_NOTIFICATION="email_address"
Save the changes then:
$ chmod +x tomcat-letsencrypt-autorenew.sh
$ sudo cp tomcat-letsencrypt-autorenew.sh /usr/local/bin
The execute the script with:
$ sudo su -
# /usr/local/bin/tomcat-letsencrypt-autorenew.sh
If you don't need email notification. you can skip the send_email_notification function.
To have a cron job run daily, checking if cert is due for renewal
$ sudo crontab -e
Add:
30 3 * * * /usr/local/bin/tomcat-letsencrypt-autorenew.sh
This means it will be running everyday at 3 am for checks.