在AWS Elastic Beanstalk上安装通配符SSL证书 [英] Install Wildcard SSL Certificate on AWS Elastic Beanstalk

问题描述

我不是目前最高级的AWS用户，并且遇到了一些障碍。

I'm not the most advanced AWS user there is, and have come across a bit of a roadblock.

我有2个Elastic Beanstalk环境，每个环境使用一个Load Balancer，两个EC2实例，它们共享一个RDS实例。一种环境用于开发，另一种环境用于生产。

I've got 2 Elastic Beanstalk Environments, each with a Load Balancer, 2 EC2 instances and they share a RDS instance. One environment is for Development and the other for Production.

我已经从Thawte购买了通配符SSL证书，并希望将其安装在开发和生产环境中。我曾经在其他方面讨论过在AWS中添加SSL证书的问题，但是自编写以来，管理界面已经发生了变化，因此我一直在努力解决这个问题。

I have purchased a wildcard SSL certificate from Thawte, and would like to install it on both the Development and Production environments. I've gone through other threads about adding SSL certificates in AWS, but the admin interface has changed since they were written so I've been going round in circles trying to figure it out.

此外，我是否在两个负载均衡器上都安装了相同的SSL证书？还是仅具有一个负载均衡器并根据域重定向流量？

Also, do I install the same SSL certificate on both Load Balancers? Or is it a case of only having one load balancer and redirecting traffic depending on the domain?

谢谢

推荐答案

您将需要两个负载均衡器，每个环境一个。对于上载证书，听起来好像您正在通过控制台创建Beanstalk环境。在这种情况下，创建环境后，请转到EC2标签，然后依次是负载均衡器和监听器。编辑它，将协议更改为https。您会发现有一个可以更改证书的地方：

You will need two load balancers, one for each environment. For uploading the certificate, it sounds like you are creating your Beanstalk environment through the console. In that case, after you create the environment, go to the EC2 tab, then 'Load Balancers', then 'Listeners'. Edit that, change the protocol to https. You'll see there is a place to change the certificate:

这将为您提供上传证书的地方：

That will give you a place to upload the certificate:

现在该证书在那里，您可以使用Elastic Beanstalk配置更改未来的环境以使用该证书：

Now that the cert is there, you can use the Elastic Beanstalk configuration to change future environments to use that cert:

这篇关于在AWS Elastic Beanstalk上安装通配符SSL证书的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！