Summary

Some time ago Liferay Cloud released the certs LCP.json field. This feature is intended to be a more robust method of configuring domains and certificates for Liferay PaaS. Since then, there have been multiple ways to add certificate information to the platform but the certs feature has proven to be the most effective way to map domains to certificates compared to the other options. In order to focus efforts on the more robust option and to provide an enhanced certificate management experience to customers, Liferay Cloud will be deprecating the other configuration options in favor of the certs field.

Details

The following configurations will be deprecated and removed from the platform.

• SSL Certificates Cloud Console page
• Custom Domains Cloud Console page
• loadBalancer.ssl LCP.json field
• loadBalancer.customDomains LCP.json field

In order to take advantage of the new experience, customers must migrate to the certs field.

Instructions

Migrating to the certs field is as simple as replacing the ssl object with the certs property in the LCP.json file and following the pattern described in our documentation here. If you don't have the ssl object set up, just add the certs property. Any configurations in the Cloud Console UI will be overridden so there is no need to remove them.

In order to avoid any interruptions, it is important to copy all of the configurations(both from the UI and from the ssl object and customDomains field) to the certs field. We encourage customers to double check and confirm nothing was missed before deployment.

Benefits

Updating to the certs field will yield the following benefits.

• One consistent certificate configuration and a unified UI
• Improved configuration granularity such as multiple certificates
• Future improvements to the UI such as certificate expiration information

Important

In order to keep the certificate information in the LCP.json file secure, Liferay Cloud strongly recommends adding certificates via secrets. Instructions on leveraging secrets for this purpose can be found here.

Schedule

Below is the end of life schedule for the legacy certificate configurations.

• November 19th, 2024 - Legacy Certificate Configuration Deprecated
  • SSL Certificates and Custom Domains pages deprecated
  • loadBalancer.ssl and loadBalancer.customDomains LCP.json fields deprecated
• March 4th, 2025 - UI Configurations Removed
  • Deprecated pages set to read-only
• June 3rd, 2025 - Legacy LCP.json Configurations Removed
  • Builds and deployments containing legacy certificate configurations will fail

Additional Information

• Be sure to update any custom services or modified services that leverage domains and certificates to the certs field as well.
• The banner in the Cloud Console UI will continue to appear until all environments are updated.
• If you encounter any issues, please submit a ticket and Liferay Support will be happy to assist.