3 ms·
Even with AWSs load balancers? We are trying to solve this issue right now in house. Any recommendations/war stories/further reading would be greatly appreciat
by mikeyjk 10y ago
Even with AWSs load balancers?
We are trying to solve this issue right now in house.
Any recommendations/war stories/further reading would be greatly appreciated.
Related forum post:
https://forums.aws.amazon.com/message.jspa?messageID=520926 https://forums.aws.amazon.com/message.jspa?messageID=520926
- CaveTech 10y agoYou need to use SAN certificates to do this (Which LE will do). You just need to be comfortable with having every domain registered appearing on the certificate.
- cowholio4 10y agoYes! I do with NGINX using SNI (to server multiple ssl certs from the same IP) and using Proxy Protocol on the ELB to send the requests to NGINX. What you need to do is enable the proxy protocol on the ELB and then point to NGINX. http://docs.aws.amazon.com/elasticloadbalancing/latest/classic/enable-proxy-protocol.html http://docs.aws.amazon.com/elasticloadbalancing/latest/class... You need to also enable the proxy_protocol in nginx. server { listen 443 ssl proxy_protocol; ... } I'll write something up and share it. But hopefully this will help you in the short term.
- mikeyjk 10y agoThat would be very kind, thank you. I'm not the particular dev who has been doing the research, but I might read his notes later to catch up to what he perceived as the pitfalls of using ELB with LetsEncrypt.
- deleted 10y ago[deleted]