Add HTTPs to Elastic Beanstalk with Cloudflare

0
votes

I am trying to add HTTPS connection to the server API I have in elastic beanstalk, using CloudFlare as DNS. Steps I have followed:

  1. Go to AWS certificate manager and create a certificate for *.nameofmydomain.com
  2. Verified the certificate
  3. Created a listener in elastic beanstalk loader section, port 443 and the previously created certificate
  4. Created a CNAME record in cloudflare that points api.nameofmydomain.com to the elastic beanstalk (xxxxx.yyyyy.eu-west-1.elasticbeanstalk.com)

When I open the https://xxxxx.yyyyy.eu-west-1.elasticbeanstalk.com I get the following error

And when I open the api.nameofmydomain.com I get this

1
amazon-web-serviceshttpsdnsamazon-elastic-beanstalkcloudflare
Is cloudflare in DNS only mode or proxy mode for api.nameofmydomain.com? - drussey
@drussey proxy mode - Thirsty
That is odd, and means this SSL error is coming from Cloudflare. Is your SSL setup with cloudflare simple the free Universal SSL provided by cloudflare? Are you perhaps using an old browser and supporting only a newer cipher suite (TLS 1.3) on Cloudflare? - drussey
@drussey i'm using the last version of firefox and I didn't make any change in cloudflare regarding SSL so I am using default settings - Thirsty
@drussey thanks for you help troubleshooting, I finally found the error - Thirsty

1 Answers

0
votes

I found the issue, turns out that wildcard ACM certificates in AWS only work for one level, and I was trying to create a domain in that was xxx.yyy.nameofmydomain.com changing it to just one level made it work