AWS Load Balancer not secure

Question

I've configured a classic load balancer using this tutorial: http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-getting-started.html

I've added an SSL certificate from AWS and the latest cipher. The listener if configured to receive connections on port 443 and send them to my instance on port 80.

When I try to access the load balancer from a browser using it's DNS name it says that it's not secure.

Why is not secure event if it has an SSL certificate? How can I make my load balancer secure? In front of the load balancer I want to have cloudflare with a full ssl.

Answer 1

You are seeing that issue because your SSL certificate is for example.com and you are accessing your endpoint using the load balancer URL abc.elb.amazonaws.com . In this situation, the URLs do not match, so your browser is showing the warning.

In actual use, you should access the load balancer via example.com , matching the domain in the SSL. You can do this using a DNS CNAME, or alias (Route 53 only), or hosts file. When accessed this way, you will not see the warning since you are accessing your actual domain.