Re: Automate Certificate Renewal for DCM and Apache HTTP application

James,

ALL my web apps are frontended by an Apache Proxy so I rely on the ease of using DCM and TLS in Apache HTTP Server.  If I wanted to I could probably secure the internal connection between Apache HTTP Server and Tomcat, but I haven't gone there...yet.

Pete Helgren
www.petesworkshop.com
CISSP - MSCM
GIAC Cloud Penetration Tester
AWS Certified Cloud Practitioner
Microsoft Certified: Azure Fundamentals

On 4/27/2026 11:10 AM, James H. H. Lampert via MIDRANGE-L wrote:

On 4/27/26 8:05 AM, Pete Helgren wrote:

Certbot is certainly one option but it doesn't fill in all the blanks. So, that is why I wrote the application ACME for DCM (used to be LE - Letsencrypt for DCM).

. . .

With a little luck, I'll push it up to the Github repo today or tomorrow.  It will be bundled as a .war file so you could just drop it into a servlet container like Tomcat or Websphere.

I like the idea of this being a WAR file, that can be dropped into Tomcat, but something doesn't add up here: I've never used (or even heard of) Tomcat using DCM if it's doing its own TLS; I've always used it with JSSE and a Java Keystore. Can you help me wrap my mind around how this would work?

(And incidentally, earlier this month, I was able to establish an ACS connection with our cloud box, so I can probably manage, with some coaching, whatever can't be done from either a terminal session or Tomcat Manager.)

And I'm delighted to see further List traffic on this subject.

--
JHHL