How to solve the problem that the deployment site in AWS can not be accessed through HTTPS

This article introduces you how to solve the problem that you can not access the AWS deployment site through HTTPS, the content is very detailed, interested friends can refer to, hope to be helpful to you.

1. Background of the site:

A https-enabled site was deployed on AWS, and then

Use ELB for load balancing and CloudFront for acceleration before ELB (can be understood as dynamic CDN)

Second, there are problems:

A user using a HTC device cannot access the https link

3. Troubleshooting:

1. View request log (jboss, nginx, elb, cloudfront)

There is no customer access log, so the customer request did not enter the system at all

two。 Troubleshoot DNS parsing problems

Using the online ping tool http://pingtool.org/, ask the customer to check if it is a DNS parsing problem

It is found that the customer's DNS resolution is correct.

3. Start from the entry of the service, first check the configuration of Cloudfront

Found:

Interesting, SNI reference documentation: https://help.aliyun.com/knowledge_detail/43742.html

Based on this, it is speculated that it may be a problem for customers to access using HTTPS.

4. Verifying whether it is a problem only with customer access using HTTPS

Customers use https and http to access the same address, and http can access it. Sure enough, the result is the same as speculated.

5. Using IE6 locally to recreate the problem of customer access to https

6. CNAME the domain name directly to ELB and skip CloudFront to successfully solve this problem.

This is how to solve the problem of not being able to access the AWS deployment site through HTTPS. I hope the above content can be helpful to you and learn more. If you think the article is good, you can share it for more people to see.