如何下载AWS RDS的rds-ca-rsa2048-g1证书

Question

由于 rds-ca-2019 即将到期，我想将我的默认证书更新为 rds-ca-rsa2048-g1 并将此证书添加到我的可信证书中，我正在尝试下载 rds-ca-rsa2048-g1 但它仍然指向旧证书 rds-ca-2019。谁能分享一下下载链接吗

https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html#UsingWithRDS.SSL.CertificatesAllRegions

Answer 1

全局捆绑包拥有所有证书，包括新的

rds-ca-rsa2048-g1

。

rds-ca-2019

证书...

keytool -printcert -v -file global-bundle.pem | grep -A2 "RDS Root 2019 CA"

Owner: CN=Amazon RDS Root 2019 CA, OU=Amazon RDS, O="Amazon Web Services, Inc.", ST=Washington, L=Seattle, C=US
Issuer: CN=Amazon RDS Root 2019 CA, OU=Amazon RDS, O="Amazon Web Services, Inc.", ST=Washington, L=Seattle, C=US
Serial number: c73467369250ae75
Valid from: Thu Aug 22 18:08:50 BST 2019 until: Thu Aug 22 18:08:50 BST 2024
--
Issuer: CN=Amazon RDS Root 2019 CA, OU=Amazon RDS, O="Amazon Web Services, Inc.", ST=Washington, L=Seattle, C=US
Serial number: 5486
Valid from: Wed Sep 04 18:13:04 BST 2019 until: Thu Aug 22 18:08:50 BST 2024
--
...

以及将于 2061/2062 年到期的

rds-ca-rsa2048-g1

CA 证书：

keytool -printcert -v -file global-bundle.pem | grep -A2 "Root CA RSA2048 G1"

Owner: L=Seattle, CN=Amazon RDS sa-east-1 Root CA RSA2048 G1, ST=WA, OU=Amazon RDS, O="Amazon Web Services, Inc.", C=US
Issuer: L=Seattle, CN=Amazon RDS sa-east-1 Root CA RSA2048 G1, ST=WA, OU=Amazon RDS, O="Amazon Web Services, Inc.", C=US
Serial number: 74e092b80f69b01a5077c108dfaf3fd0
Valid from: Wed May 19 19:06:26 BST 2021 until: Thu May 19 20:06:26 BST 2061
--
Owner: L=Seattle, CN=Amazon RDS me-central-1 Root CA RSA2048 G1, ST=WA, OU=Amazon RDS, O="Amazon Web Services, Inc.", C=US
Issuer: L=Seattle, CN=Amazon RDS me-central-1 Root CA RSA2048 G1, ST=WA, OU=Amazon RDS, O="Amazon Web Services, Inc.", C=US
Serial number: 51f55ba9aa642d8a54a9c2da8e94c95b
Valid from: Sat May 07 00:20:09 BST 2022 until: Sun May 07 01:20:09 BST 2062
--
...