So I've got a few EC2 instances acting as nodes on an ELB, and want to setup a wildcard certificate. Anyone have any good directions/links I can look into? I'm a little confused about the CSR file generation.
NOTE: Had this as comment before:
You will likely want to have the ELB pass the encrypted traffic to your EC2 instances where they can decrypt the traffic. GoDaddy has a good set of link's on how to set this up for various systems. Note, you do not have to use them for the SSL cert, but obviously the tutorial is centered on their service.
If you want a more technical explanation of what each file is, here are some links:
Wikipedia (technical): http://en.wikipedia.org/wiki/Transport_Layer_Security
Practical Example (Linux + Apache): http://www.akadia.com/services/ssh_test_certificate.html
You can generate the CSR with any web server you like and the process it through GoDaddy for your wildcard. Once you have it, export a PFX and use OpenSSL to extract the parts of the cert required for EC2 ELB.
You will need the private, public certs.
Wildcard certs are no problem, I use several myself. They're obviously helpful if you plan on securing more than one URL under the same domain name.
Keep in mind, once you build the ELB instance, you can't change anything outside of the health checks.
Here is their doc on the matter too: http://docs.amazonwebservices.com/IAM/latest/UserGuide/index.html?InstallCert.html
Here is what I did - For those who want to know the exact steps..
1) Generate your key. Nothing special here just make sure that your
2) Get yourself a multi-domain cert 3) Convert the private key to an RSA Format
4) Wait for the cert to come back...
5) Download and convert the certs to PEM format
6) Upload the whole thing..
Hope that helps