Otra versión de instalar certificado LE en openfire.

update_certificate_other.sh

+#!/bin/bash
+
+cd /etc/ssl
+
+P12=$( mktemp -q /tmp/server.XXXXXX )
+
+ALIAS="jabber.vc.hidro.cu"
+export PASS=changeit
+
+KNEW=/usr/share/openfire/resources/security/keystore.new 
+
+KOLD=/usr/share/openfire/resources/security/keystore
+FULL=/etc/ssl/${ALIAS}_fullchain.pem
+PRIV=/etc/ssl/${ALIAS}_key.pem
+
+echo "Deteniendo el servicio de OpenFire"
+/bin/systemctl stop openfire 
+
+openssl pkcs12 -export -password env:PASS -in ${FULL} -inkey ${PRIV} -out ${P12} -name ${ALIAS}
+keytool -importkeystore -deststorepass ${PASS} -destkeypass $PASS -destkeystore $KNEW -srckeystore $P12 -srcstoretype PKCS12 -srcstorepass $PASS -alias $ALIAS
+
+rm -f ${P12}
+mv $KOLD ${KOLD}.bak_$(date +%Y-%m-%d)
+mv $KNEW $KOLD
+
+echo "Arrancando el servicio de OpenFire"
+/bin/systemctl start openfire