Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a website running on a domain (e.g I have an additional domain(e.g which basically points to Amazon Cloudfront for delivery. Amazon Cloudfront in turn basically fetches the data from the main domain ( I use this setup primarily to have multiple subdomains of my to point to assets via the cdn.

The main website has a ssl certificate, and I intend to put all assets served from the cdn as https links only. Something like

<img src="" />

I'm a little confused whether I need a ssl for my cdn domain. In cloudfront I can set the setting to allow both https and http traffic.

Do I need a ssl certificate for this ? If yes, then where do I install the ssl certificate, since I don't have a server for

share|improve this question
up vote 0 down vote accepted

Yes, you do, and you'll need it on the server. Anywhere you want to use an HTTPS URL, the server(s) responsible for serving that site will need a certificate; preferably, a properly-signed certificate.

If you use a self-signed certificate, most browsers will complain about elements loaded from when loading the page.

If you serve those elements under http, most browsers will complain about the mixed-security mode when loading the page.

Edit: serving HTTPS content from a cloud of servers is quite an undertaking, and yes, afaik it would involve installing an HTTPS key/certificate pair on every server that might be called on to provide that service. If I were you, I wouldn't bother to do that, but instead serve all the content from the server.

share|improve this answer
thanks..but I don't have a server for just point it to a cloudfront distribution. How could we include cloudfront in the mix then ? Statically host (with the cert), and then point each subdomain to cloudfront ? Or totally get rid of the domain, and run everything from the main site (& subdomains) ? Any simpler workaround to this ? – hashpipe Oct 18 '12 at 7:35
thanks @MadHatter ..better to server everything from one place only then.. – hashpipe Oct 18 '12 at 12:50

With HTTPS, Amazon CloudFront only supports using the hostname assigned to you. So you won't be able to use your own domain name anyway; you'll have to use instead.

share|improve this answer
I'm talking about the case of CNAMES. I'm pointing a few subdomains to – hashpipe Oct 18 '12 at 12:43
I know. You can't do it without getting certificate warnings. So see above. – Michael Hampton Oct 18 '12 at 12:44
aahh..great...Thanks @Michael .. – hashpipe Oct 18 '12 at 12:49

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.