How2 Create SSL Certificates for IDNs (puny code) for Lightsail instances?

0

I'm currently working for a Bulgarian client that is using an International Domain Name (IDN). The domain is in Cyrillic (Bulgarian). I have converted the IDN to the appropriate puny code. However, when I try to create the ssl certificate on my Lightsail instance for Wordpress in the Bitnami stack using the bncert-tool, the tool doesn't recognise the puny code nor the Bulgarian language domain. the tool keeps asking me to "enter a valid domain name". Therefore, I can't create the certificates and secure the traffic to my customer's site.

How can I create SSL certificates for Lightsail instances for IDNs?

Help me obi wan, you're my only hope ;-)

thanks!

2 Answers
0

Hello,

Have you tried following the steps for using Let's Encrypt certificates with WordPress instances? https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-using-lets-encrypt-certificates-with-wordpress

Also, have you tried using the generated punycode rather than the unicode as inputs? If I try using unicode input - Добър.gb - then I get "Warning: Please enter valid domains." This sounds like the error you mentioned in your post.

If I try using punycode input - xn--90af4aj3c.gb - then it proceeds to later step where it warns me the domain doesn't resolve, which makes sense since I don't have that domain. xn--90af4aj3c.gb

answered 3 months ago
0

Hey Andy -

Thanks for getting back to me. Actually, it turns out that the problem was I was trying to use the bncert-tool to create the certificates. When I ran the Alternative Method and the created then manually http to https redirect rules, everything works!

So the steps were:

  1. Run the Alternative Method to create the certificates: https://docs.bitnami.com/aws/how-to/generate-install-lets-encrypt-ssl/#alternative-approac
  2. Manually create the Redirect Http2https rules: https://docs.bitnami.com/aws/apps/wordpress/administration/force-https-apache/

Now everything is working great!

It was about the bncert-tool, not the IDNs!

Thanks for getting back to me!

answered 3 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions