Jump to content


Check out our Community Blogs

Register and join over 40,000 other developers!


Recent Status Updates

View All Updates

Photo
- - - - -

Setting up SSL / HTTPS / Encryption

ssl https encryption ec2 amazon

This topic has been archived. This means that you cannot reply to this topic.
5 replies to this topic

#1 Pally

Pally

    CC Devotee

  • Senior Member
  • PipPipPipPipPipPip
  • 413 posts

Posted 15 August 2013 - 11:13 AM

I am having trouble setting up SSL on my amazon ec2 instance for two reasons,

 

it appears I need to have a domain name in order to get an SSL certificate(right now I have an elastic ip).

 

also I need to purchase a SSL certificate.. it would be more convenient if I could just write my own for free and then have an encrypted connection.

 

 

 

What is the easiest way I can setup encryption for my ec2 instance?

 

 

Thank you


Edited by Pally, 15 August 2013 - 11:16 AM.

Your Friendly Neighborhood Pally

#2 Vaielab

Vaielab

    Programming God

  • Expert Member
  • PipPipPipPipPipPipPip
  • 1382 posts

Posted 15 August 2013 - 11:50 AM

To have a ssl, you (as far as I know) absolutly need a domain name. (see http://forum.codecal...on/#entry663002)

 

And for doing it yourself, you could use openssl that generate certificate for free, but every single of your user will have a warning telling them that your ssl is invalid.


Edited by Vaielab, 16 August 2013 - 05:11 AM.

You can now stalk me on linkedin: http://ca.linkedin.c...elle/24/b44/88/ !


#3 Pally

Pally

    CC Devotee

  • Senior Member
  • PipPipPipPipPipPip
  • 413 posts

Posted 15 August 2013 - 11:59 AM

To have a ssl, you (as far as I know) absolutly need a domain name.

 

And for doing it yourself, you could use openssl that generate certificate for free, but every single of your user will have a warning telling them that your ssl is invalid.

 

Please tell me more, I don't care if it warns the user I just want it encrypted.

 

since It is a private network only people I know are using it anyways so warning them it is invalid works for me as long as it's encrypted.

 

 

Thank you Vaielab


Your Friendly Neighborhood Pally

#4 Vaielab

Vaielab

    Programming God

  • Expert Member
  • PipPipPipPipPipPipPip
  • 1382 posts

Posted 15 August 2013 - 06:35 PM

If you google "create ssl with openssl" you will find a lots of documentation on how to create the ssl.

Normally, it's 1 or 2 command line and it will give you two file.

After that, if you are using cpanel or a other control panel (zpanel, flex, webmin...) you simply copy/past the two file in the ssl config page... if you are not using thoses... well, I never did it without cpanel or a other control panel, so I'm not sure :/


You can now stalk me on linkedin: http://ca.linkedin.c...elle/24/b44/88/ !


#5 Vaielab

Vaielab

    Programming God

  • Expert Member
  • PipPipPipPipPipPipPip
  • 1382 posts

Posted 16 August 2013 - 05:10 AM

After some googling, I found that it is possible to have an ssl on a ip address

 

Can I secure my Public IP Address?
Typically a SSL Certificate is issued to a Fully Qualified Domain Name (FQDN) such as www.domain.com. However some organizations need a SSL Certificate issued to an IP address. This option allows you to specify an IP address as the Common Name in your Certificate Signing Request. The issued certificate can then be used to secure connections directly with the IP address, e.g. https://123.456.78.99.

Notes: Only Public IP Addresses may be used. You must be the owner of the IP Address as per records held at RIPE. Make sure you create a CSR with a common name of your IP address, e.g 123.456.78.90.

 

From https://www.globalsi.../faq/sslfaq.php


You can now stalk me on linkedin: http://ca.linkedin.c...elle/24/b44/88/ !


#6 Elias

Elias

    CC Lurker

  • Just Joined
  • Pip
  • 1 posts

Posted 10 October 2013 - 10:32 AM

That is correct! GlobalSign can issue an SSL certificate issued to an IP address. 

You will need to purchase the certificate under Organizational SSL, kindly refer to this link:

https://www.globalsi...ganization-ssl/

 

You may also contact them directly to assist you  :thumbup1:






Recommended from our users: Dynamic Network Monitoring from WhatsUp Gold from IPSwitch. Free Download