Skip to content

Solve: SSL Error

0

I'm using AWS free SSL services on my website: https://51.21.202.253. But there is issues. How I can solve this SSL issues?

asked a year ago330 views

3 Answers
1

You need a domain name whose DNS entry resolves to your EC2 instance public internet IP address. If you do not have a domain, you can register a new domain using Amazon Route 53 and create a DNS A and/or AAAA record.

With regards to ACM, refer to Why can't I configure ACM certificates for my website hosted on an EC2 instance?

Alternatively, use Certbot to request and install free SSL/TLS cert on your Apache web server. A domain name is still required. Certbot does not issue amazonaws.com certs for policy reasons.

If your OS is Amazon Linux 2023, refer to How to use Certbot to enable HTTPS with Apache or Nginx on EC2 instances running Amazon Linux 2023 (AL2023) ?. For other Linux OS, refer to Certbot website

AWS
EXPERT

answered a year ago

0

Hello.

ACM is a service that creates SSL certificates that are usually linked to domains.
Because the domain you are referencing is an IP address, it should not be possible to create an SSL certificate.
So, try issuing an SSL certificate for your purchased domain through your domain provider (such as Route53).
https://docs.aws.amazon.com/acm/latest/userguide/acm-overview.html

You can also create a self-signed certificate and import it, but this is not recommended for security reasons.
https://thiagoalves.ai/how-to-add-a-self-signed-ssl-certificate-to-aws-certificate-manager/

EXPERT

answered a year ago

EXPERT

reviewed a year ago

  • Since "amazonaws.com" is a domain owned by AWS, an SSL certificate cannot be issued. https://repost.aws/knowledge-center/acm-certificate-fail

    Amazon-owned domains
    If the requested certificate includes an Amazon-owned domain, such as domains that end in amazonaws.com, then the certificate request will fail with the following error: "Additional verification required to request certificates for one or more domain names in this request."

    To resolve this error, request a new certificate with a domain name that isn't owned by Amazon.

0

same thing happens for https://ec2-51-21-202-253.eu-north-1.compute.amazonaws.com where it's not an IP address.

answered a year ago

  • Youd still need a valid certificate on the EC2

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.