Adding an Intermediate Certificate in Liferay PaaS

Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM).

Issue

• Sometimes, it is necessary to include an intermediate certificate for your custom domain in Liferay PaaS.

Environment

• Liferay PaaS

Resolution

• To add an intermediate certificate, follow the steps outlined below:

  1. Open a text editor and copy the contents of the intermediate certificate file.
  2. Concatenate both certificates by pasting the intermediate certificate after the site certificate.
  3. Encode the file to Base64 format.
  4. Paste the encoded string into the webserver service's LCP.json file.
  5. Deploy to webserver service. 

-----BEGIN CERTIFICATE-----
[content of your domain certificate]
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
[content of any intermediate CA certificate]
-----END CERTIFICATE-----

Additional Information

• Adding Custom SSL Certificates
• How to generate the crt and key of a certificate on base64 for a custom domain on Liferay PaaS?