elastic-beanstalk


Howto install the api gateway client certificate into Elastic beanstalk


I have a scalable application on elastic beanstalk running on Tomcat. I read that in front of Tomcat there is an Apache server for reverse proxy. I guess I have to install on apache the client certificate and configure it to accept only request encrypted by this certificate, but I have no idea how to do that.
Can you help me?
After many researches I found a solution. According to the difficult to discover it I want share with you my experience.
My platform on elastic beanstalk is Tomcat 8 with load balancer.
To use the client certificate (at the moment I was writing) you have to terminate the https on instance
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/https-singleinstance.html
then
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/https-singleinstance-tomcat.html
I used this configuration to use both client and server certificates (seems that it doesn't work only with client certificate)
SSLEngine on
SSLCertificateFile "/etc/pki/tls/certs/server.crt"
SSLCertificateKeyFile "/etc/pki/tls/certs/server.key"
SSLCertificateChainFile "/etc/pki/tls/certs/GandiStandardSSLCA2.pem"
SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
SSLProtocol All -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLVerifyClient require
SSLVerifyDepth 1
SSLCACertificateFile "/etc/pki/tls/certs/client.crt"
And last thing: api gateway doesn't work with self signed cerificate (thanks to Client certificates with AWS API Gateway), so you have to buy one from a CA.
You might have to configure the ELB's listener for vanilla TCP on the same port instead of HTTPS. Basically TCP pass through at your ELB, your instance needs to handle on the SSL in order to authorize the requests which provided a valid client certificate.

Related Links

AWS Elastic Beanstalk - Source code in inner folder
Does anyone deploy meanio project to AWS Elasticbeanstalk?
AWS CodeDeploy?
Elastic Beanstalk randomly goes offline
How to enable parse server rest api
How to deploy config.json on elastic beanstalk
Error in AWS ElasticBeanStalk python 27 application that was running fine
Using elastic ip for amazon's ElasticBeanstalk instance
Creating custom scaling trigger for elastic beanstalk
Failing to deploy flask app on AWS Elastic Beanstalk environment
Elastic Beanstalk IAM developer permissions
Elastic beanstalk not using reserved instance
Updating AWS Elastic Bean has encountered a . How to resolve this?
How to automatically remove instances in EB whose status OutOfService is?
chmod configuration in elastic beanstalk
Where can I find elastic beanstalk “instance health for details”

Categories

HOME
wix
simulated-annealing
hortonworks-data-platform
dicom
auth0
tcl
spring-roo
styling
google-cloud-dataproc
geany
py.test
librsvg
graphengine
openui5
html5-video
angular-components
stackexchange-api
html-email
silk-performer
git-bash
dotnetbar
netlify
mlr
google-distancematrix-api
bitcode
symbolic-math
padding
angular-services
pvs-studio
dsl
true-type-fonts
scom
kube-dns
html-select
stackexchange.exceptional
server-sent-events
docker-image
packaging
linechart
firedac
gradle-tooling-api
php-5.5
tern
spark-submit
mediawiki-api
sdcc
powerpc
strip-tags
simplesamlphp
scoring
website-hosting
laravel-routing
mashery
ammonite
maven-versions-plugin
itertools
bosh-deployer
geneticsharp
vs-2015-preview
vistadb
surroundscm
ipopt
measurement-protocol
pypyodbc
pakyow
flexigrid
filenet-content-engine
wchar-t
ubiquity
gulp-rename
android-listfragment
user-registration
sketching
sslv3
mks
knockout-mvc
bessel-functions
monk
clearcase-remote-client
django-supervisor
dojo.gridx
email-spam
bson
sonata-media-bundle
delphi-2009
jxta
mms-gateway
source-highlighting
clean-urls
oledbcommand
force.com
bapi
blackberry-os-v5
orthographic
cassandra-0.7
sloc
eclipse-tptp
case-tools

Resources

Mobile Apps Dev
Database Users
javascript
java
csharp
php
android
MS Developer
developer works
python
ios
c
html
jquery
RDBMS discuss
Cloud Virtualization
Database Dev&Adm
javascript
java
csharp
php
python
android
jquery
ruby
ios
html
Mobile App
Mobile App
Mobile App