AWS SSL Configuration with google doamin

问题:

I have problem with aws SSL configuration with google domain. Follwing is the configuration my website have. www.abc.com Google domain
myloadbalancer-XXXXXX.elb.amazon.com aws load balancer

I have created SSL certificate on ACM as shown in image attached AWS ACM screenshot

Then i create loadblancer with Lister HTTPS and pointed to HTTP 80 port (EC2 instance on which website is running) Screen shot of AWS load balancer

My google domain abc.com is pointing to loadbalancer url

Problem is when i open load balancer URL in browser it show error NET::ERR_CERT_COMMON_NAME_INVALID as showing in attached imageLoad balancer browser screenshot

When i open google domain abc.com it doesn't even show HTTPS. It works for http:abc.com

I am not able to find-out why abc.com not works with HTTPS. Also i have confusion that on aws we set SSL in ACM for domain (abc.com) and then use this certificate in aws load balancer. Again load balancer is attached to google domain . Then google domain know get SSL via load balancer .Is there anything i am missing in whole setup

回答1:

You should request a new certificate and add both *.abc.com and abc.com as its domain names. According to the documentation:

When you request a wildcard certificate, the asterisk (*) must be in the leftmost position of the domain name and can protect only one subdomain level. For example, *.example.com can protect login.example.com and test.example.com, but it cannot protect test.login.example.com. Also note that *.example.com protects only the subdomains of example.com, it does not protect the bare or apex domain (example.com). However, you can request a certificate that protects a bare or apex domain and its subdomains by specifying multiple domain names in your request. For example, you can request a certificate that protects example.com and *.example.com.