Certbotで取得したSSL認証書でSpring BootでSSL対応

$sudo amazon-linux-extras install -y epel
$sudo yum update
sudo yum install -y certbot

$certbot certonly --manual -d <証明書を取得したいドメイン> -m <メールアドレス>

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Create a file containing just this data:

nfgSpbqqZ9K3jlpEj6alnO9jXnKzaPTUuSjJXGA0ixo.SIQcGAFImdW-7ZQBQhkqh6IhcHf62TQxXXXXXXXXX 　①

And make it available on your web server at this URL:

http://test.jp/.well-known/acme-challenge/nfgSpbqqZ9K3jlpEj6alnO9jXXXXXXXXXXXXXXXXXXXXX　②

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press Enter to Continue

$openssl pkcs12 -export -in fullchain.pem \
-inkey privkey.pem \
-out keystore.p12 -name \
Tomcat -CAfile \
chain.pem -caname root \

Enter Export Password:

server.port = 443
server.ssl.enabled=true
server.ssl.keyAlias=tomcat
server.ssl.key-store=classpath:keystore.p12
server.ssl.protocol=TLSv1.2
server.ssl.key-store-password=password
server.keyStoreType=PKCS12

$certbot certonly --manual -d <証明書を取得したいドメイン> -m <メールアドレス>

What would you like to do?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Keep the existing certificate for now
2: Renew & replace the certificate (may be subject to CA rate limits)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel):