: Adding LetsEncrypt to Tomcat/Apache setup with mod_jk I have a Tomcat server running behind Apache using mod_jk (the AJP connector in Tomcat). I just tried adding SSL to this setup with LetsEncrypt,

@Heady270

You can use the JkUnMount directive to prevent a directory from being handled by Tomcat. You can let the acme challenge directory be handled by Apache.

The configuration for that might look like:

JkUnMount /.well-known/acme-challenge/* *


The final * should unmount it from all configured workers. If you want to exclude that directory for just one of several workers, you can use the worker name instead.

I prefer to use reverse proxy over mod_jk with Tomcat, mostly because I find it easier to debug. Excluding directories is similar with reverse proxy. The configuration is:

ProxyPass /.well-known/acme-challenge/ !

Vote Up Vote Down