Cloudfront and node.js certs renewal strategy

Help
1

So I have a website that is hosted on domain.com (aws cloudfront -> aws s3) and sub.domain.com (aws ec2)

Both are on a ssl. How do I use letsencrypt? I can’t understand how will autorenew my cloudfront custom ssl?

Looks like a painful process to manually renew. What’s a strategy to automatically renew my certs?

2

Hi @gs11118

if you have already SSL, I don't understand your question.

Read

Then select a client.

If you have problems creating a certificate, answer all of the template questions you have seen.

3

My question is how would you autorenew them? The problem with your link is that is assuming I have 1 HTTPS server . I have 2 HTTPS servers and 2 cloudfront distributions… How do I update the cloudfront dist automatically?

Is it a good stategy to have the HTTPS server send AWS commands to the cloudfront distributions with the new SSL certs?

4

If you're talking about the certificates used on the CloudFront servers, why not use a free certificate from AWS Certificate Manager? Amazon makes automated renewal simple.

Yes, that could work.

5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.