Re: Automate Certificate Renewal for DCM and Apache HTTP application

James,

ALL my web apps are frontended by an Apache Proxy so I rely on the ease
of using DCM and TLS in Apache HTTP Server. If I wanted to I could
probably secure the internal connection between Apache HTTP Server and
Tomcat, but I haven't gone there...yet.

Pete Helgren
www.petesworkshop.com
CISSP - MSCM
GIAC Cloud Penetration Tester
AWS Certified Cloud Practitioner
Microsoft Certified: Azure Fundamentals

On 4/27/2026 11:10 AM, James H. H. Lampert via MIDRANGE-L wrote:

On 4/27/26 8:05 AM, Pete Helgren wrote:

Certbot is certainly one option but it doesn't fill in all the
blanks. So, that is why I wrote the application ACME for DCM (used to
be LE - Letsencrypt for DCM).

. . .

With a little luck, I'll push it up to the Github repo today or
tomorrow. It will be bundled as a .war file so you could just drop
it into a servlet container like Tomcat or Websphere.

I like the idea of this being a WAR file, that can be dropped into
Tomcat, but something doesn't add up here: I've never used (or even
heard of) Tomcat using DCM if it's doing its own TLS; I've always used
it with JSSE and a Java Keystore. Can you help me wrap my mind around
how this would work?

(And incidentally, earlier this month, I was able to establish an ACS
connection with our cloud box, so I can probably manage, with some
coaching, whatever can't be done from either a terminal session or
Tomcat Manager.)

And I'm delighted to see further List traffic on this subject.

--
JHHL

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.