简体繁体 English

Ubuntu

[英]AWS SSL Certificate Error - ELB/Wordpress/Apache2/Ubuntu

原文 2017-07-17 14:00:05 3 2 wordpress/ apache/ amazon-web-services/ ssl/ aws-certificate-manager

I requested a certificate for the site directly from AWS (techruptr.co.uk, *.techruptr.co.uk) and associated with the EIP, created the ELB and ensure they are all linked together. 我直接从AWS（techruptr.co.uk，* .techruptr.co.uk）索要该站点的证书，并与EIP关联，创建了ELB并确保它们都链接在一起。 The site is Wordpress and I've installed Really Simple SSL that confirms the SSL is active. 该站点是Wordpress，并且我已经安装了Really Simple SSL，它可以确认SSL处于活动状态。

However, when you go to the site it says it is not secure and that there is an issue with the certificate. 但是，当您访问该站点时，它说它不安全，并且证书存在问题。 It appears to suggest that I've used a self-signed certificate, but this shouldn't be the case. 似乎表明我使用了自签名证书，但事实并非如此。 There may also be an issue with the common name as it is the amazon assigned name rather than the website name, but doesn't seem to be anywhere to fix this on in the Certificate Manager Console. 通用名称可能也有问题，因为它是由亚马逊分配的名称，而不是网站名称，但是似乎在证书管理器控制台中找不到此通用名称。 Have attached testing results too here . 这里也附有测试结果。

Am on the verge of giving up and just importing an SSL certificate from elsewhere but thought I'd ask for help first. 即将放弃，只是从其他地方导入SSL证书，但是我想先寻求帮助。

2 个解决方案

You aren't using the SSL certificate generated by the Amazon Certificate Manager service at all. 您根本没有使用Amazon Certificate Manager服务生成的SSL证书。 Also you shouldn't be using an Elasitc IP at all if you are using an Elastic Load Balancer. 另外，如果您使用的是Elastic Load Balancer，则根本不应该使用Elasitc IP。

It appears that you have a self-signed certificate installed on your Wordpress server, an Elastic IP assigned to that server, and your DNS records are pointing directly to that Elastic IP. 看来您在Wordpress服务器上安装了自签名证书，并为该服务器分配了一个弹性IP，并且您的DNS记录直接指向该弹性IP。 This configuration would completely bypass the Elastic Load Balancer. 此配置将完全绕过Elastic Load Balancer。 Since the ACM certificate is served by the load balancer this is also completely bypassing the ACM certificate. 由于ACM证书由负载均衡器提供，因此这也完全绕过了ACM证书。

You need to configure your DNS to point to the Elastic Load Balancer, not the Elastic IP of the EC2 instance, if you want to actually use the ELB and the ACM certificate. 如果要实际使用ELB和ACM证书，则需要将DNS配置为指向Elastic Load Balancer，而不是EC2实例的Elastic IP。

Yes as Mark B mentioned you are not all using SSL issued by AWS ACM manager. 是的，正如Mark B提到的，您并非都使用AWS ACM管理器发布的SSL。 You need to configure you elastic load balancer end point in you DNS manager. 您需要在DNS管理器中配置弹性负载均衡器端点。 If you still having issues then you can move your DNS zone to Route53 and add hosted zone by A record set. 如果仍然有问题，则可以将DNS区域移至Route53并按A记录集添加托管区域。