A simple script to add on crontab task scheduler for SSL certificates using Let's Encrypt.

script-generate-tomcat-jks.sh

#!/bin/bash

DOMAIN="www.your-domain.com.br.jks";
PASS="some-ssl-key-pass";
DNAME="CN=www.your-domain.com.br, O=Org name, L=CIty, ST=STATE, C=BR";

/bin/bash /usr/java/tomcat/bin/shutdown.sh

cd /usr/java/jdk1.8.0_121/bin

/bin/rm -f /usr/java/jdk1.8.0_121/bin/*.pem

/bin/rm -f /usr/java/jdk1.8.0_121/bin/request.csr

/bin/rm -f /usr/java/config/$DOMAIN

./keytool -storepass $PASS -keypass $PASS -genkey -alias tomcat -keyalg RSA -keystore /usr/java/config/$DOMAIN -keysize 2048 -dname "$DNAME"

./keytool -certreq -alias tomcat -file request.csr -keystore /usr/java/config/$DOMAIN -storepass $PASS -keypass $PASS

certbot certonly --csr request.csr --standalone

./keytool -import -trustcacerts -alias tomcat -file 0001_chain.pem -keystore /usr/java/config/$DOMAIN -storepass $PASS -keypass $PASS

/bin/bash /usr/java/tomcat/bin/startup.sh

exit 0;