我可以使用 Nginx Certbot 将 ssl 放入 aws 默认 ec2 域吗？

Question

我试图输入命令来获取证书，但它给了我这个错误：发生意外错误：服务器不会为标识符颁发证书 :: 创建新订单时出错 :: 无法为“ec2-34-237-242 颁发” -160.compute-1.amazonaws.com”：ACME 服务器拒绝为该域名颁发证书，因为它被策略禁止

Answer 1

Let's Encrypt blocks Amazon AWS domains because the domain names are transient and are subject to change.

https://community.letsencrypt.org/t/policy-forbids-issuing-for-name-on-amazon-ec2-domain/12692/4

Answer 2

Here's an alternative

1. Create a subdomain (api.example.com) for your domain (example.com)
2. Install a reverse proxy (like nginx) on your ec2 instance
3. Configure SSL for the reverse proxy.
4. Retain SSL for the app on your ec2 instance as usual.
5. Redirect https (and probably http also) traffic to your app in the reverse proxy (like nginx) conf.