Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>Elastic Beanstalk single instance type did not support SSL via Management Console or API. You can find more information in <a href="https://forums.aws.amazon.com/thread.jspa?threadID=130409&amp;tstart=0" rel="noreferrer" title="AWS Forums">AWS Forums</a>.</p> <p>But you can use Configuration File to customize your instance to enable SSL. Please see the following example.</p> <ol> <li>Create an <code>.ebextensions</code> directory in the top-level of your source bundle.</li> <li>Copy <code>SSLCertificateFile.crt</code>, <code>SSLCertificateKeyFile.key</code>, <code>SSLCertificateChainFile.crt</code> and <code>ssl.conf</code>(apache2 ssl module configuration) into <code>.ebextensions</code></li> <li>Create a configuration file, <code>/your_app/.ebextensions/01ssl.config</code>. Type the following <code>01ssl.config</code> inside the configuration file to configure ssl settings</li> <li>Open 443 port in your security group</li> </ol> <p>01ssl.config</p> <pre><code>packages: yum: mod_ssl: [] container_commands: add-SSLCertificateFile-label: command: cp .ebextensions/SSLCertificateFile.crt /home/ec2-user/SSLCertificateFile.crt add-SSLCertificateKeyFile-label: command: cp .ebextensions/SSLCertificateKeyFile.key /home/ec2-user/SSLCertificateKeyFile.key add-SSLCertificateChainFile-label: command: cp .ebextensions/SSLCertificateChainFile.crt /home/ec2-user/SSLCertificateChainFile.crt replace-ssl-configuration-label: command: cp .ebextensions/ssl.conf /etc/httpd/conf.d/ssl.conf </code></pre> <p><a href="https://gist.github.com/phstudy/6441656" rel="noreferrer" title="ssl.conf">ssl.conf</a> example </p> <p>Your WAR structure should look like</p> <pre><code>web_app.war | |_.ebextensions | |_ 01ssl.config | |_ SSLCertificateFile.crt | |_ SSLCertificateKeyFile.key | |_ SSLCertificateChainFile.crt | |_ ssl.conf | |_META-INF | |_WEB-INF |_ classes |_ lib |_ web.xml </code></pre> <h2>2013/11/14 Updated.</h2> <ol> <li><strike>Using configuration file should pay attention to security problems, because the files in the folder .ebextensions are accessible for everyone.</strike> This may not happen in usual situation.</li> <li>AWS also provides an example Configuration File for <a href="http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/SSLJava.SingleInstance.html" rel="noreferrer" title="link">configuring SSL for Single Instance Type</a> now.</li> </ol>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload