简体繁体 English

我在哪里需要SSL证书？

[英]Where do I need an SSL certificate?

原文 2017-11-02 21:06:40 2 1 amazon-web-services/ ssl/ elastic-beanstalk

I have an app with a separate front end (AngularJS) and back end (Rails). 我有一个带有单独的前端（AngularJS）和后端（Rails）的应用程序。 They are hosted in separate AWS elastic beanstalk environments. 它们托管在单独的AWS Elastic beantalk环境中。 We have purchased an SSL certificate via AWS which matches the domain name of the front end. 我们已通过AWS购买了与前端域名相匹配的SSL证书。

Our app involves completing a survey which includes submitting personal identifiable information. 我们的应用程序涉及完成一项调查，其中包括提交个人身份信息。

Do I need an SSL certificate on both the front end and back end? 前端和后端都需要SSL证书吗？ Is it possible to use the same certificate for both? 两者可以使用相同的证书吗？ I am new to setting up these types of configurations and internet searches and AWS documentation have not helped. 设置这些类型的配置是新手，互联网搜索和AWS文档都无济于事。

1 个解决方案

Do I need an SSL certificate on both the front end and back end? 前端和后端都需要SSL证书吗？

Yes 是

Is it possible to use the same certificate for both? 两者可以使用相同的证书吗？

Yes 是

You need to request a free SSL certificate for your domain in the Amazon Certificate Management service (ACM). 您需要在Amazon Certificate Management服务（ACM）中为您的域请求免费的SSL证书。 Once you have the certificate you can easily attach it to the load balancers in each of your Elastic Beanstalk environments by adding an HTTPS listener to the load balancers, and selecting the SSL certificate from the list it will present you. 获得证书后，可以通过向负载均衡器添加HTTPS侦听器，然后从列表中选择SSL证书，轻松地将其附加到每个Elastic Beanstalk环境中的负载均衡器。

When you request the certificate specify the root domain and a star wildcard for the subdomain. 当您请求证书时，请指定根域和子域的星型通配符。 For example if your domain was example.com you would enter example.com and *.example.com in the SSL certificate request. 例如，如果您的域是example.com，则在SSL证书请求中输入example.com和*.example.com 。