简体繁体 English

使用 ELB 在 aws 实例上启用 https

[英]Enable https on aws instance with ELB

原文 2017-07-14 15:24:24 9 1 amazon-web-services/ amazon-ec2/ amazon-elb

I'm try to enable SSL on my domain which points to my AWS instance I already create LB which connects to my instance.我尝试在指向我的 AWS 实例的域上启用 SSL 我已经创建了连接到我的实例的 LB。 But when ever I try to access the domain using "https" I always get this error "refused to connect", what could be the reason for this?但是，每当我尝试使用“https”访问域时，我总是会收到“拒绝连接”错误，这可能是什么原因？

1 个解决方案

If your domain has been acquired from AWS just request a SSL certificate on Amazon Certificate Manager.如果您的域是从 AWS 获取的，只需在 Amazon Certificate Manager 上请求 SSL 证书。
aws acm request-certificate --domain-name example.com --subject-alternative-names www.example.com aws acm 请求证书 --domain-name example.com --subject-alternative-names www.example.com
(Go to step 4) （转到步骤 4）
If your domain has been acquired outside AWS like GoDaddy or another service, first you need to adquired a SSL cert, for free SSL see Let's Encrypt .如果您的域是在 AWS 之外获取的，例如 GoDaddy 或其他服务，首先您需要获取 SSL 证书，免费 SSL 请参阅Let's Encrypt 。
Import your certificate to Amazon Certificate Manager using cli使用 cli 将您的证书导入 Amazon Certificate Manager
aws acm import-certificate --certificate file://cert.pem --certificate-chain file://chain.pem --private-key file://privkey.pem aws acm import-certificate --certificate file://cert.pem --certificate-chain file://chain.pem --private-key file://privkey.pem
Create your ELB and add this listeners: See image创建您的 ELB 并添加此侦听器：参见图片
On ELB step 3 "Configure Security Settings", Choose an existing certificate from AWS Certificate Manager (ACM) and select your certificate (example.com) then continue your process.在 ELB 第 3 步“配置安全设置”中，从 AWS Certificate Manager (ACM) 选择现有证书并选择您的证书 (example.com)，然后继续您的过程。