我可以在Heroku SSL中使用AWS Certificate Manager吗？ [英] Can I use AWS Certificate Manager with Heroku SSL?

问题描述

是否可以 AWS Certificate Manager 与 Heroku SSL 为我的Heroku应用程序启用SSL？

如果是这样，如何？

如果不是，我如何获得免费的SSL / TLS证书？我应该只使用让我们加密？

解决方案

是的，你可以用一个小小的黑客。
请按照以下步骤操作：

1. 从AWS Certificate Manager创建证书并批准它


2. 使用 Origin Domain Name 创建一个Cloudfront发行版作为您的heroku URL，例如myapp.herokuapp.com和自定义SSL
   证书作为您从AWS Cert Manager创建的人员


3. 在创建分发时，确保TTL为0，否则所有响应都将被缓存


4. 假设您拥有由Route53管理的DNS（如果不是 - 您必须），请将域名指向
   创建A记录的Cloudfront分发

ol>

缺点是，如果网站上的点击次数过多，您的云端结算可能会增加，有一天您可能会考虑支付20美元/月份与Heroku相同！

Is it possible to AWS Certificate Manager with Heroku SSL to enable SSL for my Heroku app?

If so, how?

If not, how can I get a free SSL/TLS certificate? Should I just use Let's Encrypt?

解决方案

Yes, you can with a small hack. Follow the steps:

1. Create a certificate from AWS Certificate Manager and approve it
2. Create a Cloudfront distribution with the Origin Domain Name as your heroku URL such as myapp.herokuapp.com and the custom SSL certificate as the one you created from the AWS Cert Manager
3. While creating the distribution, make sure that you have the TTL as 0, else all the responses will be cached
4. Assuming that you have the DNS managed by Route53 (if it's not - you have to), point the domain name to the Cloudfront Distribution by creating an A record

The drawback is that if you get too many hits on the website, your cloudfront billing might go up and one day you might consider paying $20/month to Heroku for the same!

这篇关于我可以在Heroku SSL中使用AWS Certificate Manager吗？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！