Use Custom certificate and Let's encrypt at same time in different domains

Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM).

Issue

• We need to have some domains with custom certificates and others using provided Let's Encrypt certificates.
• Is it possible setting this kind of configuration, and how can we do it?

Environment

• Liferay PaaS

Resolution

• In the below example, you can see how to configure a domain that uses the Let's Encrypt certificate ("mycustomdomain1.com") and other that uses a custom certificate ("mycustomdomain2.com") in the Webserver service's LCP.json file:

  loadBalancer: {
    "certs": [
     {
          "customDomains": [
          "mycustomdomain1.com"
        ]
     },
     {
          "customDomains": [
          "mycustomdomain2.com"
        ],
          "key": "@ssl-key-secret-hm",
          "crt": "@ssl-crt-secret-hm"
    }
  ]
  }

• The custom certificate must not include any domain for which certificates are intended to be generated automatically.

Additional Information

• How does Let's Encrypt validates the custom domains to create their certificate?
• Custom Domains - Adding a Custom Domain via LCP.json