question

KenNagata-1934 avatar image
KenNagata-1934 asked ·

How can I set up a SSL certificate in my VM while using it as endpoint for a failover in cloud service provider

Hello,
I have been looking for an answer but I couldnt find a specific answer for my problem.
I am currently using a domain (ex: domain.com ) which is used by AWS. I used a route 53 to make a failover to my VM in azure using a subdomain (ex: subdomain.domain.com) . It works perfectly, however I havent been able to create/or find out how to set up a correct https certificate . Even when the domain.com has a ssl certificate it doesnt work with the subdomain (it is already registered in AWS *.domain.com and its working).

is it there any way to set up the certificate in this way ? or I need to actually buy a new domain from a provider?

azure-virtual-machines
1 comment
10 |1000 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

karishmatiwari-msft avatar image karishmatiwari-msft ·

@KenNagata-1934 Please 'Accept as answer' if any of the replies helped, so that it can help others in the community.

0 Votes 0 · ·

2 Answers

pituach avatar image
pituach answered ·

Great question @KenNagata-1934

By the way, exactly yesterday I configured my personal site to use SSL so it is fresh ��

is it there any way to set up the certificate in this way ? or I need to actually buy a new domain from a provider?

The short answer is yes, but I have no idea what AWS offers.

You can use a single SSL certificate for all subdomain using Wildcard configuration of the certificate.

In this case you will need to copy the certificate to all servers which might be a bit complex if you are no familiar with the topic. For most cases if you have only few sub-domains then you are probably better off simply purchasing separate certificates.

it is already registered in AWS *.domain.com and its working

I don't understand if this is working then what is not working?!?

I am not familiar with the procedure of configure SSL certificate at AWS.

I can tell you that you can get a free certificate from letsencrypt, which is nonprofit free, automated, and open certificate authority (CA), This is is the service which I use usually.

There are a large number of ACME clients available which support letsencrypt certification including in the Azure (check the link).






Share
10 |1000 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KenNagata-1934 avatar image
KenNagata-1934 answered ·

Thanks for your reply!
well, at least I know that is possible.
I tried to look for what you talk about letsencrypt but not help to know where or what to do exactly.
All the documents at the end needs a domain to actually continue the tutorial or something.
The problem is that I only have the VM without domain , the domain is just failover from the aws to the azure vm.
So, I only have my public IP address and a DNS name

**also letsencrypt is only for non profit websites, which is not a good certification for business.

1 comment Share
10 |1000 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

pituach avatar image pituach ·

Hi,

Sorry for the late response. It is almost impossible to follow threads which I started to help, in the QnA system. I just noticed that you responded.

The problem is that I only have the VM without domain

If you have VM then you have a domain, or at least you will have once you configure the DNS name.

Navigate the Virtual Machine in the portal and configure a DNS name. It should look like

<name-you-select>.westeurope.cloudapp.azure.com

I have no idea if this will work in letsencrypt but in first glance I do not see why not :-)

0 Votes 0 · ·