This is a part of an online Codename One course published around 2017 see it all for free at https://debugagent.com/series/cn1

1. Setting up a Cloud Server - Part IV

2. server.port: 8443
security.require-ssl=true
server.ssl.key-store:/home/builder/keystore.p12
server.ssl.key-store-password: password
server.ssl.keyStoreType: PKCS12
server.ssl.keyAlias: tomcat
application.properties
✦We configure the path to the keystore, notice that
setting this will break running locally so you might
want to comment this out
© Codename One 2017 all rights reserved

3. scp ~/dev/AppBackendServer/target/
AppBackendServer-0.0.1-SNAPSHOT.jar
builder@ip.of.remote.server:/home/builder
From Desktop
✦Copy the updated app to the server
© Codename One 2017 all rights reserved

4. $mv AppBackendServer-0.0.1-SNAPSHOT.jar
AppBackendServer.jar
Commands
✦Replace the previous server version
© Codename One 2017 all rights reserved

5. DNS
© Codename One 2017 all rights reserved
build.majimob.com

6. Lets Encrypt
✦ Normally certificate authorities work by verifying who
you are via phone, Duns Number etc.
✦ Lets encrypt allows anyone to prove they own a
domain and get a 90 day certificate
✦ 90 Days is painfully short but since the process is
automated & free the assumption is you won’t notice
✦ JDK 8u101 added Lets Encrypt, if you have an older
version you will need to upgrade or you will get an
exception…
© Codename One 2017 all rights reserved

7. Lets Encrypt - On Spring Boot
✦Sucks…
✦Spring Boot makes a lot of things seamless but
doesn’t do it for Lets Encrypt
✦This might change in the future but this is what I
had to do to get it to work…
© Codename One 2017 all rights reserved

8. #yum install epel-release
Commands
✦Install additional 3rd party repository for packages
© Codename One 2017 all rights reserved

9. #yum -y install yum-utils
Commands
✦Install additional utilities to fetch lets encrypt tool
© Codename One 2017 all rights reserved

10. #yum-config-manager --enable rhui-
REGION-rhel-server-extras rhui-REGION-
rhel-server-optional
Commands
✦Setup configuration for additional region required
by lets encrypt
© Codename One 2017 all rights reserved

11. #yum install certbot
Commands
✦The lets encrypt command line tool to fetch the
certificates
© Codename One 2017 all rights reserved

12. #service AppBackendServer stop
Commands
✦We run lets encrypt in sever mode so it opens it’s
own server. We need to stop our server so it can
bind to the ports
© Codename One 2017 all rights reserved

13. #certbot certonly --standalone -d
build.majimob.com -d build.majimob.com
--tls-sni-01-port 8443 --http-01-port
8080
Commands
✦Runs a server and verifies your domain against lets
encrypt then generates the certificate into place
✦Replace build.majimob.com with your domain
✦Notice the ports argument so it will work with the IP
Tables change
© Codename One 2017 all rights reserved

14. openssl pkcs12 -export -in /etc/letsencrypt/live/
build.majimob.com/fullchain.pem -inkey /etc/
letsencrypt/live/build.majimob.com/privkey.pem -out
/home/builder/keystore.p12 -name tomcat -CAfile
/etc/letsencrypt/live/build.majimob.com/chain.pem
-caname root
Commands
✦Converts the certificate to the keystore format used
by Java
✦Notice the paths include the majimob domain so you
will need to fix those…
© Codename One 2017 all rights reserved

15. #chown builder /home/builder/keystore.p12
Commands
✦The file was created under root, we need to
change it’s ownership to the right user
© Codename One 2017 all rights reserved

16. #service AppBackendServer start
Commands
✦Server can go back up, https should work now
for your domain!
© Codename One 2017 all rights reserved