How can I set up a SSL certificate in my VM while using it as endpoint for a failover in cloud service provider

Question

question

KenNagata-1934 asked · Jun 01 at 01:16 PM

How can I set up a SSL certificate in my VM while using it as endpoint for a failover in cloud service provider

Hello,
I have been looking for an answer but I couldnt find a specific answer for my problem.
I am currently using a domain (ex: domain.com ) which is used by AWS. I used a route 53 to make a failover to my VM in azure using a subdomain (ex: subdomain.domain.com) . It works perfectly, however I havent been able to create/or find out how to set up a correct https certificate . Even when the domain.com has a ssl certificate it doesnt work with the subdomain (it is already registered in AWS *.domain.com and its working).

is it there any way to set up the certificate in this way ? or I need to actually buy a new domain from a provider?

azure-virtual-machines

· 1

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

karishmatiwari-msft · Jun 10 at 09:48 PM

@KenNagata-1934 Please 'Accept as answer' if any of the replies helped, so that it can help others in the community.

0 · ·

Answer 1 · 2020-06-01T16:21:17.91Z

pituach answered · Jun 01 at 04:21 PM

Great question @KenNagata-1934

By the way, exactly yesterday I configured my personal site to use SSL so it is fresh ��

is it there any way to set up the certificate in this way ? or I need to actually buy a new domain from a provider?

The short answer is yes, but I have no idea what AWS offers.

You can use a single SSL certificate for all subdomain using Wildcard configuration of the certificate.

In this case you will need to copy the certificate to all servers which might be a bit complex if you are no familiar with the topic. For most cases if you have only few sub-domains then you are probably better off simply purchasing separate certificates.

it is already registered in AWS *.domain.com and its working

I don't understand if this is working then what is not working?!?

I am not familiar with the procedure of configure SSL certificate at AWS.

I can tell you that you can get a free certificate from letsencrypt, which is nonprofit free, automated, and open certificate authority (CA), This is is the service which I use usually.

There are a large number of ACME clients available which support letsencrypt certification including in the Azure (check the link).

· Share

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2020-06-02T02:07:32.713Z

KenNagata-1934 answered · Jun 02 at 02:07 AM

Thanks for your reply!
well, at least I know that is possible.
I tried to look for what you talk about letsencrypt but not help to know where or what to do exactly.
All the documents at the end needs a domain to actually continue the tutorial or something.
The problem is that I only have the VM without domain , the domain is just failover from the aws to the azure vm.
So, I only have my public IP address and a DNS name

**also letsencrypt is only for non profit websites, which is not a good certification for business.

· 1 · Share

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

pituach · Jun 11 at 04:24 PM

Hi,

Sorry for the late response. It is almost impossible to follow threads which I started to help, in the QnA system. I just noticed that you responded.

The problem is that I only have the VM without domain

If you have VM then you have a domain, or at least you will have once you configure the DNS name.

Navigate the Virtual Machine in the portal and configure a DNS name. It should look like

<name-you-select>.westeurope.cloudapp.azure.com

I have no idea if this will work in letsencrypt but in first glance I do not see why not :-)

0 · ·

question