无法在AWS ec2实例中将我的网站托管为https

时间:2016-06-23 18:27:00

标签: ubuntu ssl https apache2 virtualhost

我正在AWS EC2上运行ubuntu实例。我正在尝试在HTTPS下配置我的默认ec2公共DNS。我按照this博客

中提供的步骤创建了所有必需的文件(.crt,.key& .csr)

我将000-default.confg文件更改为

# The ServerName directive sets the request scheme, hostname and port that # the server uses to identify itself. This is used when creating # redirection URLs. In the context of virtual hosts, the ServerName # specifies what hostname must appear in the request's Host: header to # match this virtual host. For the default virtual host (this file) this # value is not decisive as it is used as a last resort host regardless. # However, you must set it for any further virtual host explicitly. ServerName ec2-xxx-xxx-xxx-xxx.ap-southeast-1.compute.amazonaws.com ServerAdmin webmaster@localhost DocumentRoot /var/www/html/abc

    # Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
    # error, crit, alert, emerg.
    # It is also possible to configure the loglevel for particular
    # modules, e.g.
    #LogLevel info ssl:warn

    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

    # For most configuration files from conf-available/, which are
    # enabled or disabled at a global level, it is possible to
    # include a line for only one particular virtual host. For example the
    # following line enables the CGI configuration for this host only
    # after it has been globally disabled with "a2disconf".
    #Include conf-available/serve-cgi-bin.conf
    SSLEngine on
    SSLCertificateFile /ssl-certificates/testing.crt
    SSLCertificateKeyFile /ssl-certificates/testing.key
   SSLCertificateChainFile /ssl-certificates/testing.crt

# Available loglevels: trace8, ..., trace1, debug, info, notice, warn, # error, crit, alert, emerg. # It is also possible to configure the loglevel for particular # modules, e.g. #LogLevel info ssl:warn ErrorLog ${APACHE_LOG_DIR}/error.log CustomLog ${APACHE_LOG_DIR}/access.log combined # For most configuration files from conf-available/, which are # enabled or disabled at a global level, it is possible to # include a line for only one particular virtual host. For example the # following line enables the CGI configuration for this host only # after it has been globally disabled with "a2disconf". #Include conf-available/serve-cgi-bin.conf SSLEngine on SSLCertificateFile /ssl-certificates/testing.crt SSLCertificateKeyFile /ssl-certificates/testing.key SSLCertificateChainFile /ssl-certificates/testing.crt

即使在此之后我无法在https

中打开我的网站

1 个答案:

答案 0 :(得分:0)

如果您仍在使用http版本,请确保您正在侦听端口443.如果您尚未编辑配置文件以便在443上收听,请将<VirtualHost *:80替换为<VirtualHost *:443> }。 另外我认为既然您正在使用aw,那么如果默认情况下还没有将您的443端口暴露给互联网,则需要将其暴露在互联网上。