I would like this website www.albunack.net to support SSL
It is installed as a Java WAR file onto AWS Elastic Beanstalk at albunack.elasticbeanstalk.com, dns (as single instance) configuration is under Route 53 control.
I don't have much system admin knowledge, what is the easiest way to enable SSL for this
This is a very specific request, so I'm hoping for a series of specific steps to achieve this rather than general advice.
CodePudding user response:
From AWS recommendation, using ElasticBeanstalk, the easiest way to handle the SSL is over AWS Load Balancer.
Reference: https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/configuring-https.html
From AWS, you can easily get yourself a free SSL certificate which is issued by AWS, or import your self-signed certificate into AWS ACM.
- How to issue your own public SSL certificate? https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-public.html
- How to import your SSL certificate? https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html
If we choose ElasticBeanstalk, AWS recommends us going with Load Balancer & Auto-Scaling to leverage all of good features that provided by ElasticBeanstalk such as Blue-Green deployment model.
Amazon Lightsail is a choice
If you manage your application with just a single EC2 instance under ElasticBeanstalk, I recommend using Amazon Lightsail which cost is much more better.
How to install SSL on a standalone EC2 instance
Here is a very old post but you can see the overview of steps on doing it on a single EC2 instance. https://www.freecodecamp.org/news/going-https-on-amazon-ec2-ubuntu-14-04-with-lets-encrypt-certbot-on-nginx-696770649e76/