我正在使用 elasticbeanstalk:PHP 8.1 在 64 位 Amazon Linux 2/3.5.6 上运行。
我已按照以下指南建立 https 连接:
https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/https-singleinstance-php.html
packages:
yum:
mod24_ssl : []
files:
/etc/httpd/conf.d/ssl.conf:
mode: "000644"
owner: root
group: root
content: |
LoadModule ssl_module modules/mod_ssl.so
Listen 443
<VirtualHost *:443>
<Proxy *>
Order deny,allow
Allow from all
</Proxy>
SSLEngine on
SSLCertificateFile "/etc/pki/tls/certs/server.crt"
SSLCertificateKeyFile "/etc/pki/tls/certs/server.key"
SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
SSLProtocol All -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLSessionTickets Off
Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains; preload"
Header always set X-Frame-Options DENY
Header always set X-Content-Type-Options nosniff
ProxyPass / http://localhost:80/ retry=0
ProxyPassReverse / http://localhost:80/
ProxyPreserveHost on
RequestHeader set X-Forwarded-Proto "https" early
</VirtualHost>
/etc/pki/tls/certs/server.crt:
mode: "000400"
owner: root
group: root
content: |
-----BEGIN CERTIFICATE-----
My crt ………..
-----END CERTIFICATE-----
/etc/pki/tls/certs/server.key:
mode: "000400"
owner: root
group: root
content: |
-----BEGIN RSA PRIVATE KEY-----
My private key ………..
-----END RSA PRIVATE KEY-----
但是我在部署新版本时收到以下错误:Yum does not have mod24_ssl available for installation
为了解决这个问题,我将波纹管代码更新为 mod_ssl:
yum:
mod_ssl : []
但是部署新版本时没有错误,但是一旦我尝试通过 https 访问我的网站,我在 chrome 上收到了以下错误:
此站点无法访问
如何将 https 与在单个实例上运行 linux 2 的 amazon elasticbeanstalk 一起使用?
注意:我不喜欢运行以下命令:
sudo yum install -y mod24_ssl
因为我不想每次 elasticbeanstalk 环境添加新实例时都将 ssh 连接到每个实例。
谢谢