AWS EC2上的Java Web服务SSL？

Question

I am using Dropwizard to develop my service that will eventually be hosted on an EC2 instance.

Currently Amazon Certificates can only be used for services like Elastic Beanstalk. You cannot download any of the certificate details to sign or roll your own key.

http://docs.aws.amazon.com/cli/latest/reference/acm/get-certificate.html

I tried using the java keytool to generate a keystore file for the public domain the service will be available at, however that gives a Certficate warning on the browser.

Is the solution to use Elastic beanstalk for Java services?

Any suggestions are welcome!

Answer 1

Is the solution to use Elastic beanstalk for Java services?

That doesn't solve your issue in any way. That just gives you an EC2 instance with a Load Balancer. You could setup a Load Balancer yourself if you want one. Elastic Beanstalk doesn't provide special SSL certificate support beyond what you could do yourself.

I tried using the java keytool to generate a keystore file for the public domain the service will be available at, however that gives a Certficate warning on the browser.

You generated a self-signed certificate , which is going to show warnings in a browser. You need to obtain an SSL certificate from an actual certificate authority if you want to avoid the browser warnings.

If you don't want to use a Load Balancer or CloudFront along with an AWS ACM certificate, then you will need to procure a valid SSL certificate from some other certificate authority and install that directly on your EC2 instance. The most popular way to do this without incurring any cost is to use Let's Encrypt certificates.