SSL on Widlfly 15.0.0.1 using certbot / letencrypt issue with .well-known

[dluzzon]

HI

maybe you can assis with this or guide for alternative solution

I ran this command:

sudo certbot certonly --manual --preferred-challenges http -d my-domain.co.il -d www.my-domain.co.il --manual-auth-hook /opt/SSLCertificates/authenticator.sh --non-interactive --manual-public-ip-logging-ok

where opt/SSLCertificates/authenticator.sh

have this info:

TARGET_DIR=/opt/wildfly/standalone/deployments/my.war/.well-known/acme-challenge

mkdir -p $TARGET_DIR

echo $CERTBOT_VALIDATION > $TARGET_DIR/$CERTBOT_TOKEN

it fail on my.war is not a directory and failed to create the related hiden directories

in general I’m following this doc:

Java blog: Enabling SSL in Wildfly using a free certificate from Let's Encrypt

After execution It produced this output:

Running manual-auth-hook command: /opt/SSLCertificates/authenticator.sh

manual-auth-hook command “/opt/SSLCertificates/authenticator.sh” returned error code 1

Error output from manual-auth-hook command authenticator.sh:

mkdir: cannot create directory ‘/opt/wildfly/standalone/deployments/my.war’: Not a directory

/opt/SSLCertificates/authenticator.sh: line 5: /opt/wildfly/standalone/deployments/my.war/.well-known/acme-challenge/TUSVVmbo_aVe-FJpSzMPgeCsYQTM5iGb2hFL8Bjh-ao: Not a directory

Running manual-auth-hook command: /opt/SSLCertificates/authenticator.sh

manual-auth-hook command “/opt/SSLCertificates/authenticator.sh” returned error code 1

Error output from manual-auth-hook command authenticator.sh:

mkdir: cannot create directory ‘/opt/wildfly/standalone/deployments/my.war’: Not a directory

/opt/SSLCertificates/authenticator.sh: line 5: /opt/wildfly/standalone/deployments/my.war/.well-known/acme-challenge/p715Ov-Wi-YF2qLRGVreTPF-Z-kzpDC9Su3HCW22IYM: Not a directory

Waiting for verification…

Challenge failed for domain my-domain.co.il

Challenge failed for domain www.my-domain.co.il

http-01 challenge for my-domain.co.il

http-01 challenge for www.my-domain.co.il

Cleaning up challenges

Some challenges have failed.

IMPORTANT NOTES:

The following errors were reported by the server:

Domain: my-domain.co.il

Type: unauthorized

Detail: Invalid response from

http://my-domain.co.il/.well-known/acme-challenge/TUSVVmbo_aVe-FJpSzMPgeCsYQTM5iGb2hFL8Bjh-ao

[109.207.76.136]: 404

Domain: www.my-domain.co.il

Type: unauthorized

Detail: Invalid response from

http://www.my-domain.co.il/.well-known/acme-challenge/p715Ov-Wi-YF2qLRGVreTPF-Z-kzpDC9Su3HCW22IYM

[109.207.76.136]: 404

My web server is (include version):wildfly 15.0.0.1

The operating system my web server runs on is (include version):CentOS 7

My hosting provider, if applicable, is: BOX (co.il)

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): certbot 0.35.1

[jaikiran]

If you want the .war to be a directory then you can deploy it in exploded form and then run your commands. Exploded deployment is nothing more than extracting the .war as a directory in the standalone/deployments directory and adding a marker file to trigger the deployment. See more details here (sections like "Marker files") Application deployment - Latest WildFly Documentation - Project Documentation Editor

[fjuma]

It is possible to easily obtain and manage certificates from Let’s Encrypt using the WildFly CLI, no need to use certbot anymore. See the following blog post for details:

https://developer.jboss.org/people/fjuma/blog/2018/08/31/obtaining-certificates-from-lets-encrypt-using-the-wildfly-cli

[dluzzon]

Yes, thanks a lot.