Liferay PaaS: Custom domains are not SSL certified by Liferay

Legacy Knowledge Base

Published Jun. 30, 2025

Liferay PaaS: Custom domains are not SSL certified by Liferay

Written By

Solyom Nagy-Györkös

Legacy Article

You are viewing an article from our legacy "FastTrack" publication program, made available for informational purposes. Articles in this program were published without a requirement for independent editing or verification and are provided"as is" without guarantee.

Before using any information from this article, independently verify its suitability for your situation and project.

Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM).

Issue

We have domains that are NOT using custom SSL certificates, however, they refuse to use https connection.

Environment

Liferay PaaS

Resolution

The correct methodology to achieve these results is modifying your LCP.json file of your Webserver service like the following:

"prd": {
      "loadBalancer": {
        "targetPort": 80,
        "cdn": true,
        "certs": [
          {
            "customDomains": ["custom-domain.with-custom-certificate.example"],
            "key": "@ssl-key-secret-multidomain",
            "crt": "@ssl-crt-secret-multidomain"
          },
          {
            "customDomains": ["custom-domain.with-default-certificate.example"]
          }
        ]
      }