亚马逊S3 - HTTPS / SSL - 这可能吗？ [英] Amazon S3 - HTTPS/SSL - Is it possible?

问题描述

我看到有关这一点没有任何真正的答案或信息的一些其他问题（或因此出现了）。

I saw a few other questions regarding this without any real answers or information (or so it appeared).

我有一个形象在这里：
<一href="http://furniture.retailcatalog.us/products/2061/6262u9665.jpg">http://furniture.retailcatalog.us/products/2061/6262u9665.jpg

I have an image here:
http://furniture.retailcatalog.us/products/2061/6262u9665.jpg

这是重定向到：
<一href="http://furniture.retailcatalog.us.s3.amazonaws.com/products/2061/6262u9665.jpg">http://furniture.retailcatalog.us.s3.amazonaws.com/products/2061/6262u9665.jpg

Which is redirecting to:
http://furniture.retailcatalog.us.s3.amazonaws.com/products/2061/6262u9665.jpg

我需要它（HTTPS）：
<一href="https://furniture.retailcatalog.us/products/2061/6262u9665.jpg">https://furniture.retailcatalog.us/products/2061/6262u9665.jpg

I need it to be (https):
https://furniture.retailcatalog.us/products/2061/6262u9665.jpg

因此​​，我安装上retailcatalog.us（我们还有其他子域）通配符SSL，但它不能正常工作。我去查
<一href="https://furniture.retailcatalog.us.s3.amazonaws.com/products/2061/6262u9665.jpg">https://furniture.retailcatalog.us.s3.amazonaws.com/products/2061/6262u9665.jpg

So I installed a wildcard ssl on retailcatalog.us (we have other subdomains), but it wasn't working. I went to check
https://furniture.retailcatalog.us.s3.amazonaws.com/products/2061/6262u9665.jpg

和它不工作，这意味着亚马逊S3网站本身的HTTPS是不工作的。

And it wasn't working, which means on the Amazon S3 website itself the https wasn't working.

我如何使这项工作？

推荐答案

这是一个响应我从他们的premium服务得到了

This is a response I got from their Premium Services

您好，

这是实际使用SSL的方式问题，验证带包含名称的时期，'。'，>字符。我们已经证明这种行为在这里：

This is actually a issue with the way SSL validates names containing a period, '.', > character. We've documented this behavior here:

<一个href="http://docs.amazonwebservices.com/AmazonS3/latest/dev/BucketRestrictions.html">http://docs.amazonwebservices.com/AmazonS3/latest/dev/BucketRestrictions.html

有关这个问题的唯一直接的解决方法是使用不含有字符桶的名字。你可能会考虑使用一个名为家具retailcatalog美国斗。这将允许您使用HTTPS与

The only straight-forward fix for this is to use a bucket name that does not contain that character. You might instead use a bucket named 'furniture-retailcatalog-us'. This would allow you use HTTPS with

<一个href="https://furniture-retailcatalog-us.s3.amazonaws.com/">https://furniture-retailcatalog-us.s3.amazonaws.com/

您可以，当然，把一个CNAME DNS记录，使更多的友好。例如，

You could, of course, put a CNAME DNS record to make that more friendly. For example,

images-furniture.retailcatalog.us IN CNAME furniture-retailcatalog-us.s3.amazonaws.com。

images-furniture.retailcatalog.us IN CNAME furniture-retailcatalog-us.s3.amazonaws.com.

希望有所帮助。让我们知道，如果你有任何其他问题。

Hope that helps. Let us know if you have any other questions.

亚马逊Web服务

不幸的是你的友好的CNAME将验证证书时可能会导致主机名不匹配，所以你不能真正使用它的安全连接。 S3的一大缺失的功能是接受自定义证书为您的站点。

Unfortunately your "friendly" CNAME will cause host name mismatch when validating the certificate, therefore you cannot really use it for a secure connection. A big missing feature of S3 is accepting custom certificates for your domains.

更新2012年10月2日

从@mpoisot：

亚马逊提供的不再是链接说HTTPS的事情。我在S3文档周围戳和最终的虚拟主机页面上发现了一个小纸条一下：<一href="http://docs.amazonwebservices.com/AmazonS3/latest/dev/VirtualHosting.html">http://docs.amazonwebservices.com/AmazonS3/latest/dev/VirtualHosting.html

The link Amazon provided no longer says anything about https. I poked around in the S3 docs and finally found a small note about it on the Virtual Hosting page: http://docs.amazonwebservices.com/AmazonS3/latest/dev/VirtualHosting.html

更新二零一三年六月十七日

从@Joseph欲望：

From @Joseph Lust:

刚拿到它！检查出来，并签署了一个邀请：<一href="http://aws.amazon.com/cloudfront/custom-ssl-domains">http://aws.amazon.com/cloudfront/custom-ssl-domains

Just got it! Check it out and sign up for an invite: http://aws.amazon.com/cloudfront/custom-ssl-domains

这篇关于亚马逊S3 - HTTPS / SSL - 这可能吗？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！