Can I use Lets Encrypt SSL on AWS EC2 for subdomain of government website

Help
1

Hello, I am running apache2 server on an AWS EC2 instance. I am working on a small website for an Indian government agency. So, I gave them public IP address of the instance, and they point the domain now. My question is - Is it possible for me to configure Lets Encrypt SSL certificate, given that I have access to the server? Do I need access to DNS or something?

My domain is: mistic.mizoram.gov.in

I ran this command:

It produced this output:

My web server is (include version): Apache2

The operating system my web server runs on is (include version): Ubuntu 18.04

My hosting provider, if applicable, is: AWS EC2

I can login to a root shell on my machine (yes or no, or I don’t know): Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

2

On any system that you can run an ACME client on and respond to HTTP requests, you can get a cert.
(NOTE: the default authentication method is HTTP - but there are others)
If it can't accept HTTP requests, then you would have to authenticate via DNS.
That requires updating their DNS zone.
For a government zone, that is probably above your pay grade.

3

Yes, it accepts HTTP request. I have full access to the server. If anything more access is needed, I can request access for that or asked those who have access to make the change.

So, do you mean “YES, you can get a cert” ?

4

As u can see, the domain is - mistic.mizoram.gov.in

5

Then definitely YES*.
(I can't say for sure if there exist any IPS or GeoLocation devices that may block those HTTP request)
(in a normal/public web server, you should have no problem)

1 Like
6

Check it on Lets Debug and from one of my own PCs, it looks open and good:

curl -Iki http://mistic.mizoram.gov.in/
HTTP/1.1 200 OK
Date: Thu, 14 May 2020 10:13:58 GMT
Server: Apache/2.4.29 (Ubuntu)
Content-Type: text/html; charset=UTF-8
1 Like
7

Thanks. I'll try and get back if I face any problem!

1 Like
8

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.