Invalid Certificate Bitnami EC2Why I am getting “Problem loading the page” after enabling HTTPS for Apache on Windows 7?EC2 ELB Wildcard SSL Renewal “Invalid Public Key Certificate”Bitnami redmine error SVNclient denied by server configuration: /opt/bitnami/apps/wordpress/htdocs/Certificate common name invalidRemove “www” subdomain from Bitnami install of Wordpress on AWS EC2Adaptive Images issue on Bitnami Ubuntu ServerUnable to successfully install GoDaddy SSL Certificate to Bitnami>Apache v2.4.23Redirect from http to https stopped working after update of MoodleHow to copy mongo db from mongodb 3.0 to mongodb 3.6 on ec2 bitnami image
Don’t seats that recline flat defeat the purpose of having seatbelts?
How to write a column outside the braces in a matrix?
Converting a sprinkler system's 24V AC outputs to 3.3V DC logic inputs
I preordered a game on my Xbox while on the home screen of my friend's account. Which of us owns the game?
Check if a string is entirely made of the same substring
Can SQL Server create collisions in system generated constraint names?
What are the steps to solving this definite integral?
A Note on N!
Minor Revision with suggestion of an alternative proof by reviewer
Can we say “you can pay when the order gets ready”?
Map of water taps to fill bottles
Pulling the rope with one hand is as heavy as with two hands?
Are there physical dangers to preparing a prepared piano?
Critique of timeline aesthetic
Does a large simulator bay have standard public address announcements?
Pre-plastic human skin alternative
How to stop co-workers from teasing me because I know Russian?
How would 10 generations of living underground change the human body?
How can Republicans who favour free markets, consistently express anger when they don't like the outcome of that choice?
Extension of 2-adic valuation to the real numbers
Rivers without rain
What does the integral of a function times a function of a random variable represent, conceptually?
What happens in the secondary winding if there's no spark plug connected?
How does Captain America channel this power?
Invalid Certificate Bitnami EC2
Why I am getting “Problem loading the page” after enabling HTTPS for Apache on Windows 7?EC2 ELB Wildcard SSL Renewal “Invalid Public Key Certificate”Bitnami redmine error SVNclient denied by server configuration: /opt/bitnami/apps/wordpress/htdocs/Certificate common name invalidRemove “www” subdomain from Bitnami install of Wordpress on AWS EC2Adaptive Images issue on Bitnami Ubuntu ServerUnable to successfully install GoDaddy SSL Certificate to Bitnami>Apache v2.4.23Redirect from http to https stopped working after update of MoodleHow to copy mongo db from mongodb 3.0 to mongodb 3.6 on ec2 bitnami image
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
i have just bumped into SSL thing without any prior knowledge. I am working on bitnami AWS EC2 instance. Yesterday i mistakenly deleted all the files on the home. So i lost my SSH access to instance. I created image from this instance and launched a new instance with same settings. Fortunately my code and database was intact.
Now i have a an up and running server but the browser always show the Invalid Certificate. Previously it was working fine. To make it correct i generated new Certificates by using this bitnami tutorial.
Problem:
Server still shows invalid certificate. If i access it via HTTP then it works fine but whenever i use HTTPS it does not validate certificate.
Configuration:
in /opt/bitnami/apache2/conf/bitnami/bitnami.conf i have
<IfVersion < 2.3 >
NameVirtualHost *:80
NameVirtualHost *:443
</IfVersion>
<VirtualHost _default_:80>
DocumentRoot "/opt/bitnami/apache2/htdocs"
<Directory "/opt/bitnami/apache2/htdocs">
Options Indexes FollowSymLinks
AllowOverride All
<IfVersion < 2.3 >
Order allow,deny
Allow from all
</IfVersion>
<IfVersion >= 2.3 >
Require all granted
</IfVersion>
</Directory>
# Error Documents
ErrorDocument 503 /503.html
# Bitnami applications installed with a prefix URL (default)
Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>
# Default SSL Virtual Host configuration.
<IfModule !ssl_module>
LoadModule ssl_module modules/mod_ssl.so
</IfModule>
Listen 443
#SSLProtocol all -SSLv2 -SSLv3
#SSLHonorCipherOrder on
#SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !EDH !RC4"
#SSLPassPhraseDialog builtin
#SSLSessionCache "shmcb:/opt/bitnami/apache2/logs/ssl_scache(512000)"
#SSLSessionCacheTimeout 300
<VirtualHost _default_:443>
DocumentRoot "/opt/bitnami/apache2/htdocs"
SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/server.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"
<Directory "/opt/bitnami/apache2/htdocs">
Options Indexes FollowSymLinks
AllowOverride All
<IfVersion < 2.3 >
Order allow,deny
Allow from all
</IfVersion>
<IfVersion >= 2.3 >
Require all granted
</IfVersion>
</Directory>
# Error Documents
#ErrorDocument 503 /503.html
# Bitnami applications installed with a prefix URL (default)
# Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>
# Bitnami applications that uses virtual host configuration
#Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-vhosts.conf"
After changes i run /opt/bitnami/ctlscript.sh start
amazon-ec2 ssl-certificate bitnami
asked Apr 19 at 11:55
Rafay Zia MirRafay Zia Mir
1011
add a comment |
i have just bumped into SSL thing without any prior knowledge. I am working on bitnami AWS EC2 instance. Yesterday i mistakenly deleted all the files on the home. So i lost my SSH access to instance. I created image from this instance and launched a new instance with same settings. Fortunately my code and database was intact.
Now i have a an up and running server but the browser always show the Invalid Certificate. Previously it was working fine. To make it correct i generated new Certificates by using this bitnami tutorial.
Problem:
Server still shows invalid certificate. If i access it via HTTP then it works fine but whenever i use HTTPS it does not validate certificate.
Configuration:
in /opt/bitnami/apache2/conf/bitnami/bitnami.conf i have
<IfVersion < 2.3 >
NameVirtualHost *:80
NameVirtualHost *:443
</IfVersion>
<VirtualHost _default_:80>
DocumentRoot "/opt/bitnami/apache2/htdocs"
<Directory "/opt/bitnami/apache2/htdocs">
Options Indexes FollowSymLinks
AllowOverride All
<IfVersion < 2.3 >
Order allow,deny
Allow from all
</IfVersion>
<IfVersion >= 2.3 >
Require all granted
</IfVersion>
</Directory>
# Error Documents
ErrorDocument 503 /503.html
# Bitnami applications installed with a prefix URL (default)
Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>
# Default SSL Virtual Host configuration.
<IfModule !ssl_module>
LoadModule ssl_module modules/mod_ssl.so
</IfModule>
Listen 443
#SSLProtocol all -SSLv2 -SSLv3
#SSLHonorCipherOrder on
#SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !EDH !RC4"
#SSLPassPhraseDialog builtin
#SSLSessionCache "shmcb:/opt/bitnami/apache2/logs/ssl_scache(512000)"
#SSLSessionCacheTimeout 300
<VirtualHost _default_:443>
DocumentRoot "/opt/bitnami/apache2/htdocs"
SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/server.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"
<Directory "/opt/bitnami/apache2/htdocs">
Options Indexes FollowSymLinks
AllowOverride All
<IfVersion < 2.3 >
Order allow,deny
Allow from all
</IfVersion>
<IfVersion >= 2.3 >
Require all granted
</IfVersion>
</Directory>
# Error Documents
#ErrorDocument 503 /503.html
# Bitnami applications installed with a prefix URL (default)
# Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>
# Bitnami applications that uses virtual host configuration
#Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-vhosts.conf"
After changes i run /opt/bitnami/ctlscript.sh start
amazon-ec2 ssl-certificate bitnami
asked Apr 19 at 11:55
Rafay Zia MirRafay Zia Mir
1011
Bitnami Engineer here. The guide you mentioned explains how to create a SSL certificate but you will need a Certificate Authority to sign the certificate. If you don't want to buy a certificate from a CA, you can also use Let's Encrypt to generate the certificate. We include a script that takes care of creating and configuring the certificate in the instance:sudo /opt/bitnami/letsencrypt/scripts/generate-certificate.sh -m YOURMAIL -d YOURDOMAIN -d www.YOURDOMAIN
– Jota Martos
Apr 22 at 10:52
@JotaMartos your comment is appreciated. I have also tried that but that refuses me straight away because policy does not allow to create such certificate. It always gives me policy error. When I searched some forums(I dont remember which forums), a guy(Also from bitnami) commented that we dont allow address for certificates that contain EC2 instance address. Because today it belongs to you other month it belongs to someone else.
– Rafay Zia Mir
Apr 22 at 11:23
And it makes sense to me as well. I also tried installed Lego Client separately but no luck.
– Rafay Zia Mir
Apr 22 at 11:26
Ok, if you don't want to use Let's Encrypt, you will need to create a certificate following the documentation we have and you need to ensure that you set the correct domains when creating the certificate. After that, you will need to share that certificate with a CA so it signs the certificate for you to use. Once signed, you will need to replace the files you have in the server.
– Jota Martos
Apr 23 at 7:29
add a comment |
i have just bumped into SSL thing without any prior knowledge. I am working on bitnami AWS EC2 instance. Yesterday i mistakenly deleted all the files on the home. So i lost my SSH access to instance. I created image from this instance and launched a new instance with same settings. Fortunately my code and database was intact.
Now i have a an up and running server but the browser always show the Invalid Certificate. Previously it was working fine. To make it correct i generated new Certificates by using this bitnami tutorial.
Problem:
Server still shows invalid certificate. If i access it via HTTP then it works fine but whenever i use HTTPS it does not validate certificate.
Configuration:
in /opt/bitnami/apache2/conf/bitnami/bitnami.conf i have
<IfVersion < 2.3 >
NameVirtualHost *:80
NameVirtualHost *:443
</IfVersion>
<VirtualHost _default_:80>
DocumentRoot "/opt/bitnami/apache2/htdocs"
<Directory "/opt/bitnami/apache2/htdocs">
Options Indexes FollowSymLinks
AllowOverride All
<IfVersion < 2.3 >
Order allow,deny
Allow from all
</IfVersion>
<IfVersion >= 2.3 >
Require all granted
</IfVersion>
</Directory>
# Error Documents
ErrorDocument 503 /503.html
# Bitnami applications installed with a prefix URL (default)
Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>
# Default SSL Virtual Host configuration.
<IfModule !ssl_module>
LoadModule ssl_module modules/mod_ssl.so
</IfModule>
Listen 443
#SSLProtocol all -SSLv2 -SSLv3
#SSLHonorCipherOrder on
#SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !EDH !RC4"
#SSLPassPhraseDialog builtin
#SSLSessionCache "shmcb:/opt/bitnami/apache2/logs/ssl_scache(512000)"
#SSLSessionCacheTimeout 300
<VirtualHost _default_:443>
DocumentRoot "/opt/bitnami/apache2/htdocs"
SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/server.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"
<Directory "/opt/bitnami/apache2/htdocs">
Options Indexes FollowSymLinks
AllowOverride All
<IfVersion < 2.3 >
Order allow,deny
Allow from all
</IfVersion>
<IfVersion >= 2.3 >
Require all granted
</IfVersion>
</Directory>
# Error Documents
#ErrorDocument 503 /503.html
# Bitnami applications installed with a prefix URL (default)
# Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>
# Bitnami applications that uses virtual host configuration
#Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-vhosts.conf"
After changes i run /opt/bitnami/ctlscript.sh start
amazon-ec2 ssl-certificate bitnami
asked Apr 19 at 11:55
Rafay Zia MirRafay Zia Mir
1011
i have just bumped into SSL thing without any prior knowledge. I am working on bitnami AWS EC2 instance. Yesterday i mistakenly deleted all the files on the home. So i lost my SSH access to instance. I created image from this instance and launched a new instance with same settings. Fortunately my code and database was intact.
Now i have a an up and running server but the browser always show the Invalid Certificate. Previously it was working fine. To make it correct i generated new Certificates by using this bitnami tutorial.
Problem:
Server still shows invalid certificate. If i access it via HTTP then it works fine but whenever i use HTTPS it does not validate certificate.
Configuration:
in /opt/bitnami/apache2/conf/bitnami/bitnami.conf i have
<IfVersion < 2.3 >
NameVirtualHost *:80
NameVirtualHost *:443
</IfVersion>
<VirtualHost _default_:80>
DocumentRoot "/opt/bitnami/apache2/htdocs"
<Directory "/opt/bitnami/apache2/htdocs">
Options Indexes FollowSymLinks
AllowOverride All
<IfVersion < 2.3 >
Order allow,deny
Allow from all
</IfVersion>
<IfVersion >= 2.3 >
Require all granted
</IfVersion>
</Directory>
# Error Documents
ErrorDocument 503 /503.html
# Bitnami applications installed with a prefix URL (default)
Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>
# Default SSL Virtual Host configuration.
<IfModule !ssl_module>
LoadModule ssl_module modules/mod_ssl.so
</IfModule>
Listen 443
#SSLProtocol all -SSLv2 -SSLv3
#SSLHonorCipherOrder on
#SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !EDH !RC4"
#SSLPassPhraseDialog builtin
#SSLSessionCache "shmcb:/opt/bitnami/apache2/logs/ssl_scache(512000)"
#SSLSessionCacheTimeout 300
<VirtualHost _default_:443>
DocumentRoot "/opt/bitnami/apache2/htdocs"
SSLEngine on
SSLCertificateFile "/opt/bitnami/apache2/conf/server.crt"
SSLCertificateKeyFile "/opt/bitnami/apache2/conf/server.key"
<Directory "/opt/bitnami/apache2/htdocs">
Options Indexes FollowSymLinks
AllowOverride All
<IfVersion < 2.3 >
Order allow,deny
Allow from all
</IfVersion>
<IfVersion >= 2.3 >
Require all granted
</IfVersion>
</Directory>
# Error Documents
#ErrorDocument 503 /503.html
# Bitnami applications installed with a prefix URL (default)
# Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-prefix.conf"
</VirtualHost>
# Bitnami applications that uses virtual host configuration
#Include "/opt/bitnami/apache2/conf/bitnami/bitnami-apps-vhosts.conf"
After changes i run /opt/bitnami/ctlscript.sh start
amazon-ec2 ssl-certificate bitnami
amazon-ec2 ssl-certificate bitnami
asked Apr 19 at 11:55
Rafay Zia MirRafay Zia Mir
1011
asked Apr 19 at 11:55
Rafay Zia MirRafay Zia Mir
1011
asked Apr 19 at 11:55
Rafay Zia MirRafay Zia Mir
1011
asked Apr 19 at 11:55
Rafay Zia MirRafay Zia Mir
1011
asked Apr 19 at 11:55
Rafay Zia MirRafay Zia Mir
1011
1011
Bitnami Engineer here. The guide you mentioned explains how to create a SSL certificate but you will need a Certificate Authority to sign the certificate. If you don't want to buy a certificate from a CA, you can also use Let's Encrypt to generate the certificate. We include a script that takes care of creating and configuring the certificate in the instance:sudo /opt/bitnami/letsencrypt/scripts/generate-certificate.sh -m YOURMAIL -d YOURDOMAIN -d www.YOURDOMAIN
– Jota Martos
Apr 22 at 10:52
@JotaMartos your comment is appreciated. I have also tried that but that refuses me straight away because policy does not allow to create such certificate. It always gives me policy error. When I searched some forums(I dont remember which forums), a guy(Also from bitnami) commented that we dont allow address for certificates that contain EC2 instance address. Because today it belongs to you other month it belongs to someone else.
– Rafay Zia Mir
Apr 22 at 11:23
And it makes sense to me as well. I also tried installed Lego Client separately but no luck.
– Rafay Zia Mir
Apr 22 at 11:26
Ok, if you don't want to use Let's Encrypt, you will need to create a certificate following the documentation we have and you need to ensure that you set the correct domains when creating the certificate. After that, you will need to share that certificate with a CA so it signs the certificate for you to use. Once signed, you will need to replace the files you have in the server.
– Jota Martos
Apr 23 at 7:29
add a comment |
Bitnami Engineer here. The guide you mentioned explains how to create a SSL certificate but you will need a Certificate Authority to sign the certificate. If you don't want to buy a certificate from a CA, you can also use Let's Encrypt to generate the certificate. We include a script that takes care of creating and configuring the certificate in the instance:sudo /opt/bitnami/letsencrypt/scripts/generate-certificate.sh -m YOURMAIL -d YOURDOMAIN -d www.YOURDOMAIN
– Jota Martos
Apr 22 at 10:52
@JotaMartos your comment is appreciated. I have also tried that but that refuses me straight away because policy does not allow to create such certificate. It always gives me policy error. When I searched some forums(I dont remember which forums), a guy(Also from bitnami) commented that we dont allow address for certificates that contain EC2 instance address. Because today it belongs to you other month it belongs to someone else.
– Rafay Zia Mir
Apr 22 at 11:23
And it makes sense to me as well. I also tried installed Lego Client separately but no luck.
– Rafay Zia Mir
Apr 22 at 11:26
Ok, if you don't want to use Let's Encrypt, you will need to create a certificate following the documentation we have and you need to ensure that you set the correct domains when creating the certificate. After that, you will need to share that certificate with a CA so it signs the certificate for you to use. Once signed, you will need to replace the files you have in the server.
– Jota Martos
Apr 23 at 7:29
Bitnami Engineer here. The guide you mentioned explains how to create a SSL certificate but you will need a Certificate Authority to sign the certificate. If you don't want to buy a certificate from a CA, you can also use Let's Encrypt to generate the certificate. We include a script that takes care of creating and configuring the certificate in the instance:
sudo /opt/bitnami/letsencrypt/scripts/generate-certificate.sh -m YOURMAIL -d YOURDOMAIN -d www.YOURDOMAIN– Jota Martos
Apr 22 at 10:52
Bitnami Engineer here. The guide you mentioned explains how to create a SSL certificate but you will need a Certificate Authority to sign the certificate. If you don't want to buy a certificate from a CA, you can also use Let's Encrypt to generate the certificate. We include a script that takes care of creating and configuring the certificate in the instance:
sudo /opt/bitnami/letsencrypt/scripts/generate-certificate.sh -m YOURMAIL -d YOURDOMAIN -d www.YOURDOMAIN– Jota Martos
Apr 22 at 10:52
@JotaMartos your comment is appreciated. I have also tried that but that refuses me straight away because policy does not allow to create such certificate. It always gives me policy error. When I searched some forums(I dont remember which forums), a guy(Also from bitnami) commented that we dont allow address for certificates that contain EC2 instance address. Because today it belongs to you other month it belongs to someone else.
– Rafay Zia Mir
Apr 22 at 11:23
@JotaMartos your comment is appreciated. I have also tried that but that refuses me straight away because policy does not allow to create such certificate. It always gives me policy error. When I searched some forums(I dont remember which forums), a guy(Also from bitnami) commented that we dont allow address for certificates that contain EC2 instance address. Because today it belongs to you other month it belongs to someone else.
– Rafay Zia Mir
Apr 22 at 11:23
And it makes sense to me as well. I also tried installed Lego Client separately but no luck.
– Rafay Zia Mir
Apr 22 at 11:26
And it makes sense to me as well. I also tried installed Lego Client separately but no luck.
– Rafay Zia Mir
Apr 22 at 11:26
Ok, if you don't want to use Let's Encrypt, you will need to create a certificate following the documentation we have and you need to ensure that you set the correct domains when creating the certificate. After that, you will need to share that certificate with a CA so it signs the certificate for you to use. Once signed, you will need to replace the files you have in the server.
– Jota Martos
Apr 23 at 7:29
Ok, if you don't want to use Let's Encrypt, you will need to create a certificate following the documentation we have and you need to ensure that you set the correct domains when creating the certificate. After that, you will need to share that certificate with a CA so it signs the certificate for you to use. Once signed, you will need to replace the files you have in the server.
– Jota Martos
Apr 23 at 7:29
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963804%2finvalid-certificate-bitnami-ec2%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f963804%2finvalid-certificate-bitnami-ec2%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Bitnami Engineer here. The guide you mentioned explains how to create a SSL certificate but you will need a Certificate Authority to sign the certificate. If you don't want to buy a certificate from a CA, you can also use Let's Encrypt to generate the certificate. We include a script that takes care of creating and configuring the certificate in the instance:
sudo /opt/bitnami/letsencrypt/scripts/generate-certificate.sh -m YOURMAIL -d YOURDOMAIN -d www.YOURDOMAIN– Jota Martos
Apr 22 at 10:52
@JotaMartos your comment is appreciated. I have also tried that but that refuses me straight away because policy does not allow to create such certificate. It always gives me policy error. When I searched some forums(I dont remember which forums), a guy(Also from bitnami) commented that we dont allow address for certificates that contain EC2 instance address. Because today it belongs to you other month it belongs to someone else.
– Rafay Zia Mir
Apr 22 at 11:23
And it makes sense to me as well. I also tried installed Lego Client separately but no luck.
– Rafay Zia Mir
Apr 22 at 11:26
Ok, if you don't want to use Let's Encrypt, you will need to create a certificate following the documentation we have and you need to ensure that you set the correct domains when creating the certificate. After that, you will need to share that certificate with a CA so it signs the certificate for you to use. Once signed, you will need to replace the files you have in the server.
– Jota Martos
Apr 23 at 7:29