Elastic Beanstalk添加多个ssl证书 [英] Elastic Beanstalk Add more than one ssl certificate

问题描述

我有一个Docker，Django api应用程序，可以从多个域abc.xyx.com或def.lmn.com中调用.我已经从弹性beantalk的配置控制台中成功添加了abc.xyz.com的ssl证书.这样一来，只能为443端口添加一个证书.

I have a Docker, Django api application that can be called from multiple domains abc.xyx.com or def.lmn.com. I have added successfully the ssl certificate for abc.xyz.com from the configuration console in elastic beanstalk. That allows only one certificate to be added for 443 port.

从aws证书管理器创建def.lmn.com证书后如何添加?

How do i add the def.lmn.com certificate after creating it from aws certificate manager?

推荐答案

借助SNI(服务器名称指示)，可以在aws中托管多个SSL安全的应用程序，每个应用程序都有自己的SSL证书. 为了实现此目的，您需要为应用程序使用应用程序负载平衡器. 因此，要使用SNI，您需要将多个证书绑定到Application Load Balancer上的同一侦听器.

Multiple SSL secured applications can be hosted in aws with each having their own SSL certificates with the help of SNI (Server Name Indication). In order to achieve this you need to use an Application Load Balancer for your application. Hence, for using SNI you need to bind multiple certificates to the same listener on your Application Load Balancer.

如果在创建环境时尚未配置Application Load Balancer，则需要创建一个新环境并对其进行配置. 配置应用程序负载平衡器: https://docs.aws .amazon.com/elasticbeanstalk/latest/dg/environments-cfg-alb.html

If you have not configured Application Load Balancer while creating your environment, then you need to create a new environment and configure it. Configuring Application Load Balancer: https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/environments-cfg-alb.html

如果在创建Elastic Beanstalk环境时配置了Application Load Balancer，则添加多个证书应遵循的步骤:

Steps to be followed for adding multiple certificates, if you have configured Application Load Balancer while creating your Elastic Beanstalk Environment :

步骤1:通过"AWS证书管理器"服务导入/上传所需的所有证书.

Step 1: Import/Upload all the certificates you require through "AWS Certificate Manager" service.

第2步:在控制台中打开您的负载均衡器.

Step 2: Open your Load Balancer in the console.

第3步:转到侦听器"标签，然后选择查看/编辑证书".

Step 3: Go to the listeners tab, and select "view/edit certificates" .

第4步:现在，使用左上角的"+"按钮并选择所需的证书.然后点击添加"按钮.

Step 4: Now, use the "+" button in the top left corner and select the certificates you require. Then click the "Add" button.

就是这样.这样，您可以将多个证书添加到您的应用程序.

That's it. In this way you can add multiple certificates to your application.

这也可以在CLI的帮助下使用以下命令完成: aws elbv2 add-listener-certificates --listener-arn [listener-arn] --certificates CertificateArn = [cert-arn]

This can also done with the help of CLI using the following command: aws elbv2 add-listener-certificates --listener-arn [listener-arn] --certificates CertificateArn=[cert-arn]

希望这会有所帮助:)

这篇关于Elastic Beanstalk添加多个ssl证书的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！