How to use Jetty certificates with Let Encrypt?

Question

I want to use certificates from Let encrypt with a lot of Jetty servers. One problem is that Let Encrypt certificates have a lifespan of 90 days .

To handle this, the Jetty server or some additional code must frequently renew the certificate.

• Can Jetty handle this? If so, how can I enable this?
• If I need to implement it using the Java client , then how can I replace the certificate dynamically through the Jetty API without rebooting the Jetty Server?

Edit: some related and partial useful links:

• configure ssl keystore at run time in Jetty
• Jetty SSL server certificate change on the fly

Answer 1

Starting with version 9.3.15 you can use:

SslContextFactory.reload(Consumer<SslContextFactory>) 

See details at: https://github.com/eclipse/jetty.project/issues/918