This will configure an Asustor NAS to use letsencrypt certificate without exposing it to the internet.
To achieve this we use certbot with DNS-01 challenge to Cloudflare.
mkdir /volume1/system/letsencrypt
touch /volume1/system/letsencrypt/cloudflare.ini
chown root:root /volume1/system/letsencrypt
chmod 700 /volume1/system/letsencrypt
chmod 600 /volume1/system/letsencrypt/cloudflare.ini
| # 1. Convert our ".jks" file to ".p12" (PKCS12 keystore format): | |
| /opt/applications/confluence/jre/bin/keytool -importkeystore -srckeystore /opt/applications/confluence-ssl/tomcat.keystore -destkeystore tomcat.p12 -deststoretype PKCS12 | |
| # 2. Extract pem (certificate) from ".p12" keystore file: | |
| openssl pkcs12 -nokeys -in tomcat.p12 -out certificate-chain.pem | |
| # 3. Extract unencrypted key file from ".p12" keystore file: | |
| openssl pkcs12 -nocerts -nodes -in tomcat.p12 -out unencrypted-key.key |