0

I'm currently running into issues after installing/creating a certificate via the ACM. I installed it onto the ELB and have setup my ports as shown below:

enter image description here

The security group for the EC2 Instance is as shown below:

enter image description here

Is there anything I'm missing? The IIS on the EC2 is on port 80 as I can't download the certificate and install it on the machine. I can't really find any tutorials indicating what the setup should actually be. Overall I'm intending that all traffic should be across https rather than http. Will I need to get a hold of a installable certificate?

Edit: When the website is visited via the https address. A white screen is displayed. If I take off the Certificate and switch back to port 80 the website shows

2
  • 1
    You need to clarify "issues". What isn't working? We can't help fix anything without a clear understanding of what is broken. ACM certificates are not exactable, so you cannot put it directly on your IIS installation. It's very typical for the ELB to terminate HTTPS instead.
    – vcsjones
    Aug 9, 2016 at 14:04
  • Sorry, thought I did. Will edit the question to indicate :)
    – Byakku
    Aug 9, 2016 at 14:08

1 Answer 1

0

Judging from your photos, it appears your security groups are setup incorrect.

Your first image shows that the ELB is using HTTP:80 to the instances. However, according to your second image, your security group for the EC2 instance doesn't have port 80 open.

Change your security group for the EC2 instance to have port 80 open.

7
  • Unfortunately that didn't work, when I try that via both http and https I get the "This site can't be reached" message
    – Byakku
    Aug 9, 2016 at 14:17
  • If I add in a rule on the ELB to listen on port 80 to forward to port 80 this then works and the site is displayed. I'm wondering if there's something I need to do on the actual deployment of the site on the EC2 (i.e. alteration of the web.config or other setting)
    – Byakku
    Aug 9, 2016 at 14:23
  • @user1838667 is the ELB and EC2 instances sharing the same security group? There shouldn't be much to do on IIS, as far as it is concerned, you're accessing it over HTTP.
    – vcsjones
    Aug 9, 2016 at 14:35
  • Yeah, same security group.
    – Byakku
    Aug 9, 2016 at 14:38
  • 1
    Ah ha, you were right :) If I switched the load balancer to have it's own security group open to port 443, which then forwarded to the EC2 security group that's open on port 80 this worked. Thanks a lot for your help
    – Byakku
    Aug 10, 2016 at 7:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.