简体繁体 English

如何为域和子域安装 SSL 证书

[英]How to install SSL certificate for domain and subdomain

原文 2020-06-03 19:45:45 6 2 amazon-web-services/ ssl/ amazon-ec2/ lets-encrypt

I want to install certificate on Ec2 for domains and subdomains.我想在 Ec2 上为域和子域安装证书。

I'm running a website "www.example.in" on single EC2 instance which is in public subnet with public IP and also pointing some subdomains like "api.example.in", "dashboard.example.in" and "jenkins.example.in" to the same EC2 instance.我在单个 EC2 实例上运行一个网站“www.example.in”，该实例位于具有公共 IP 的公共子网中，并且还指向一些子域，如“api.example.in”、“dashboard.example.in”和“jenkins。 example.in”到同一个 EC2 实例。

I thought to use ACM certificate to secure my website but ACM certificate can't be use directly on EC2 instance.我想使用 ACM 证书来保护我的网站，但 ACM 证书不能直接在 EC2 实例上使用。

If i use third party tools like "let's encrypt".如果我使用“让我们加密”之类的第三方工具。 If I install certificate directly on EC2, will it block my subdomains or will impact on my website?如果我直接在 EC2 上安装证书，它会阻止我的子域还是会影响我的网站？

2 个解决方案

With ACM (Amazon certs) https://aws.amazon.com/premiumsupport/knowledge-center/configure-acm-certificates-ec2/使用 ACM（亚马逊证书） https://aws.amazon.com/premiumsupport/knowledge-center/configure-acm-certificates-ec2/

Without ACM (bring your own cert) https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/SSL-on-amazon-linux-2.html没有 ACM（自带证书） https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/SSL-on-amazon-linux-2.html

No, it will not block your website.不，它不会阻止您的网站。 "Let's encrypt" works just fine. “让我们加密”工作得很好。 I have worked with it.我已经使用它了。

Regarding your subdomains, you can create a wildcard certificate that can provide SSL for example.in and all subdomains (eg api.example.in, dashboard.example.in).关于您的子域，您可以创建一个通配符证书，该证书可以提供 SSL for example.in 和所有子域（例如 api.example.in、dashboard.example.in）。

Let's Encrypt supports wildcard certs . Let's Encrypt 支持通配符证书。