Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-08 Thread Garret Wilson
On 10/7/2020 10:12 AM, Garret Wilson wrote: … But anyway, let me tell you the idea I had this morning. In a way, you hinted at it in your reply. Why do I need to use S3 as a store if my application is running on AWS, and AWS already has the AWS Certificate Manager which already manages an SSL

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-08 Thread Christopher Schultz
Garret, On 10/7/20 13:12, Garret Wilson wrote: > As always thanks for the discussion, Chris. More replies and a new idea > below: > > On 10/6/2020 2:45 PM, Christopher Schultz wrote: >> … >> What if your Docker container would just run certbot on launch? > > But then I'm back to being a

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-07 Thread Garret Wilson
As always thanks for the discussion, Chris. More replies and a new idea below: On 10/6/2020 2:45 PM, Christopher Schultz wrote: … What if your Docker container would just run certbot on launch? But then I'm back to being a sysadmin, because the Docker container is like a little OS and I

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-06 Thread James H. H. Lampert
On 10/6/20 2:48 PM, Christopher Schultz wrote: Thanks for mentioning LEGO. Any time I've been mentioning certbot, you can replace that with $your-favorite-acme-client. You're welcome. LEGO definitely cut my Gordian Knot on that particular project, wherein Certbot absolutely, positively,

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-06 Thread Christopher Schultz
James, On 10/5/20 19:59, James H. H. Lampert wrote: > I'm coming into this conversation late, so what I say could be > completely irrelevant, but when I recently set up an independent (i.e., > not behind httpd) Tomcat server on one of our AWS EC2 instances, and > could not get certbot to function

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-06 Thread Christopher Schultz
Garret, On 10/5/20 19:45, Garret Wilson wrote: > On 10/5/2020 2:42 PM, Christopher Schultz wrote: >> … >> Sure, it can contain S3 credentials and you can pick-up your key and >> certificate (or, better yet, the whole keystore) there, but at that >> point you have "moved" the problem outside of

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-05 Thread James H. H. Lampert
I'm coming into this conversation late, so what I say could be completely irrelevant, but when I recently set up an independent (i.e., not behind httpd) Tomcat server on one of our AWS EC2 instances, and could not get certbot to function at all, to save my life, I ended up using something

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-05 Thread Garret Wilson
On 10/5/2020 2:42 PM, Christopher Schultz wrote: … Sure, it can contain S3 credentials and you can pick-up your key and certificate (or, better yet, the whole keystore) there, but at that point you have "moved" the problem outside of Tomcat, right? No, not at all. The major problems are: 1.

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-05 Thread Christopher Schultz
Garret, On 10/5/20 12:21, Garret Wilson wrote: > Thank you so much for replying, Chris. Responses below. > > On 10/5/2020 8:53 AM, Christopher Schultz wrote: >> Microservices won't work the way you want with Let's Encrypt. You have >> two options: >> >> 1. Hit Let's Encrypt every time you launch

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-05 Thread Garret Wilson
Thank you so much for replying, Chris. Responses below. On 10/5/2020 8:53 AM, Christopher Schultz wrote: Microservices won't work the way you want with Let's Encrypt. You have two options: 1. Hit Let's Encrypt every time you launch a new instance of the microservice to deploy a new certificate

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-05 Thread Christopher Schultz
Garret, On 10/4/20 14:04, Garret Wilson wrote: > Hi, everyone. I'm back already. (I had intended to leave the list to > focus my efforts elsewhere, but … here I am again.) > > I just realized there is a big SSL problem for small applications, and I > want to fix it. First a little review of

Re: completely automated (for real) Let's Encrypt on embedded Tomcat

2020-10-04 Thread Martynas Jusevičius
https://github.com/AtomGraph/letsencrypt-tomcat On Sun, Oct 4, 2020 at 8:04 PM Garret Wilson wrote: > > Hi, everyone. I'm back already. (I had intended to leave the list to > focus my efforts elsewhere, but … here I am again.) > > I just realized there is a big SSL problem for small