Trying to configure an external SSL certificate for EC2 load balancer

0

Hi all,

I am trying to add a ZeroSSL certificate to an AWS Load Balancer for a site hosting on an EC2 instance, but more than a week later, both my domain and the IP are not showing a secure connection in the browser.

This is what Chrome says when going to the EIP connected to the instance: Enter image description here

On the domain, it says "This site can’t provide a secure connection".

The website consists a React.js app, hosted by an Nginx static server on port 80, using a Docker container.

The Load Balancer type I choose is an Application LB, and the scheme is internet-facing. Here is a screenshot of the resource map: Enter image description here

And the security group opens port 80 and 443 to all:

Enter image description here

Any help would be much appreciated. Thanks so much!

2 個答案
1
已接受的答案

Hi @matangbr,

I assume that you have your reasons for using ZeroSSL certificates.

The response from Chrome on connecting to the EIP is expected and correct as the certificate is issued for the domain and not for the IP address. No surprises there.

You might be getting an insecure connection error on the domain because the certificate you imported is invalid or corrupt. I recommend re-importing the certificate on the ALB and it should resolve the issue.

You are not using best practices in configuring security groups. While too many security groups might create performance issues, having just one security group open to all is a very insecure practice. Consider creating a separate security group for SSH and lock it down as much as possible.

Hope this helps.

profile picture
已回答 2 個月前
0

Why don’t you use an AWS certificate as they are free?

Are you connecting to the ALB as your security group rules allow port 22 with I presume would be for the EC2. That too is bad in its own.

You also mention your connecting via IP. If that’s the EC2 IP then your not using the ALB.

Can you confirm your connecting to the alb and what DNS name?

profile picture
專家
已回答 2 個月前
profile picture
專家
已審閱 2 個月前
profile picture
專家
已審閱 2 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南