I have an instance built with ubuntu 16.04, it has 2 applications (no bitnami)
I setup the vhost pointing two differenst website and it works fine
but now that I'm trying to validate the ssl certificate I've been struggling
first, at all, I would like to know if can set it up without using the Load Balancer ?
in the AWS lightsail ssl documentation they only mention the load balancer but I also have a domain with an SSL certificate (I have my domains on namecheap )
I try certbot, looks like people setup without Load Balancer but using the steps from the bitnami documentation.. but I'm not using bitnami
config everything following the steps from https://certbot.eff.org/lets-encrypt/ubuntuxenial-apache tested out on https://www.ssllabs.com/ssltest/ but I couldn't make it work, it only does the http redirect to https...but the https show the herror This site can’t be reached
I didn't setup any DNS I didn't see any turials using it just in the aws lightsail ssl
run apachectl configtest
no errors
I create a rule on my firewall for
http port 80
https port 443
what else can I look at? I'm really confused and dont know what's the problem
Really appreciate
Amazon Lightsail uses SSL/TLS certificates to handle encrypted web traffic (HTTPS requests). You can create certificates, verify domain ownership, and then attach the validated certificates to a Lightsail load balancer or distribution.
If you use HTTPS (SSL or TLS) for your front-end listener, you must deploy an SSL/TLS certificate on your load balancer. The load balancer uses the certificate to terminate the connection and then decrypt requests from clients before sending them to the instances.
At the most basic level, SSL is a function of the web server. You can absolutely use SSL with lightsail without a load balancer.
I've used LetsEncrypt quite a lot with my lightsail instances.
certbot-auto automates the process quite nicely.
You need to verify that the certificates are setup in your apache configuration.
Take a look at https://community.letsencrypt.org/t/apache-configuration-example/2338 for an example.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With