Unable to activate cloudfront for my domain

0

Hi,

I created cloudfront distribution for my domain and then changed the www entry into my DNS panel (DNS panel is not with route53) to CNAME provided by cloudfront distribution. I even uploaded my third party CA certificate which is a wildcard certificate which is lets say *.exmaple.com and www.example.com CNAME d3oooep89xmnwn.cloudfront.net

However when I try to access the url https://www.example.com not sure what's going wrong but getting below error.

Am I missing anything?

curl -v -I https://www.example.com

  • Trying 108.159.61.86:443...
  • Connected to www.example.com (108.159.61.86) port 443 (#0)
  • schannel: disabled automatic use of client certificate
  • ALPN: offers http/1.1
  • schannel: next InitializeSecurityContext failed: SEC_E_ILLEGAL_MESSAGE (0x80090326) - This error usually occurs when a fatal SSL/TLS alert is received (e.g. handshake failed). More detail may be available in the Windows System event log.
  • Closing connection 0 curl: (35) schannel: next InitializeSecurityContext failed: SEC_E_ILLEGAL_MESSAGE (0x80090326) - This error usually occurs when a fatal SSL/TLS alert is received (e.g. handshake failed). More detail may be available in the Windows System event log.

And then checked the windows event logs and seeing below error The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is www.example.com. The TLS connection request has failed. The attached data contains the server certificate.

asked 2 years ago364 views
1 Answer
0

Apart from configuring CNAME from your DNS service provider, you will need to configure (add) "Alternate domain names" at your CloudFront distributiion level. You will also need to upload your SSL certificate to ACM (AWS Certificate Manager) in us-east-1 (N. Virginia) region. This SSL certificate must match the "Alternate domain names" configured above.

Please refer to this link

AWS
answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions